Skip to content
OpenAdvisories

Archive

19 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /19 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Unscored —
    CVE-2023-38354

    MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows attackers to achieve remote cod…

  • Unscored —
    CVE-2023-38352

    MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows attackers to achieve remote code execu…

  • Unscored —
    CVE-2023-38355

    MiniTool Movie Maker 7.0 contains an insecure installation process that allows attackers to achieve remote code executi…

  • Unscored —
    CVE-2023-38351

    MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows attackers to achieve remote code…

  • Unscored —
    CVE-2023-38356

    MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote cod…

  • Unscored —
    CVE-2023-38353

    MiniTool Power Data Recovery version 11.6 and before contains an insecure in-app payment system that allows attackers t…

  • Unscored —
    CVE-2023-36319 Public exploit

    File Upload vulnerability in Openupload Stable v.0.4.3 allows a remote attacker to execute arbitrary code via the actio…

  • Unscored —
    CVE-2023-31808

    Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative …

  • Unscored —
    CVE-2023-40932

    A Cross-site scripting (XSS) vulnerability in Nagios XI version 5.11.1 and below allows authenticated attackers with ac…

  • Unscored —
    CVE-2023-40933 Public exploit

    A SQL injection vulnerability in Nagios XI v5.11.1 and below allows authenticated attackers with announcement banner co…

  • Unscored —
    CVE-2023-40934

    A SQL injection vulnerability in Nagios XI 5.11.1 and below allows authenticated attackers with privileges to manage ho…

  • Unscored —
    CVE-2023-40931 Public exploit Scanner template EPSS 12%

    A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attacker…

  • Unscored —
    CVE-2023-41599 Scanner template EPSS 12%

    An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory trave…

  • Unscored —
    CVE-2023-41387

    A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tok…

  • Medium 6.1
    CVE-2023-42399

    Jodit Editor vulnerable to cross-site scripting

    Cross Site Scripting vulnerability in xdsoft.net Jodit Editor v.4.0.0-beta.86 allows a remote attacker to obtain sensitive information via the rich text editor component.

    jodit npm
  • Critical 9.8
    CVE-2022-28357

    NATS nats-server allows directory traversal via unintended path to a management action

    NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.

    nats-server github.com/nats-io/nats-server/v2 github.com/nats-io/nats-server Ubuntu Go