Skip to content
OpenAdvisories

Archive

21 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /21 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • Unscored —
    CVE-2023-41614

    A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allo…

  • High 7.5
    CVE-2023-42261

    Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is t…

    mobsf PyPI
  • Medium 4.7
    CVE-2023-42482

    Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free.

  • Unscored —
    CVE-2023-42280

    mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not …

  • Unscored —
    CVE-2023-42279

    Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form.

  • High 8.8
    CVE-2023-43236

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWa…

  • Unscored —
    CVE-2023-43241

    D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadio…

  • High 7.5
    CVE-2023-43274

    Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter.

  • High 8.8
    CVE-2023-43237 EPSS 13%

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC.

  • High 7.5
    CVE-2023-43669

    Tungstenite allows remote attackers to cause a denial of service

    The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., …

    zed rust-tungstenite tungstenite rust-tungstenite Debian Ubuntu Wolfi crates.io
  • Unscored —
    CVE-2023-43235

    D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDown…

  • High 8.8
    CVE-2023-43242

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel.

  • High 8.8
    CVE-2023-43238

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi.

  • High 8.8
    CVE-2023-43239 EPSS 13%

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC.

  • Unscored —
    CVE-2023-43309

    There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input…

  • Unscored —
    CVE-2023-43240 EPSS 13%

    D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter.

  • Unscored —
    CVE-2023-43128

    D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of…

  • Medium 6.1
    CVE-2018-5478

    Contao Cross-site Scripting vulnerabililty

    Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

    contao/core Packagist