Skip to content
OpenAdvisories

Archive

18 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /18 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-42454

    SQLpage vulnerable to public exposure of database credentials

    SQLpage is a SQL-only webapp builder. Someone using SQLpage versions prior to 0.11.1, whose SQLpage instance is exposed publicly, with a database connection string specified in the `sqlpage/sqlpage.json` configuration file (not in an environment variable), wi…

    lovasoa SQLpage sqlpage crates.io
  • Critical 10.0
    CVE-2023-41084

    Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking

    Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.

    Socomec MODULYS GP (MOD3GP-SY-120K)
  • Critical 9.8
    CVE-2023-33831 Public exploit Scanner template EPSS 26%

    A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA

    A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.

    @frangoteam/fuxa npm