Skip to content
OpenAdvisories

Archive

22 September 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-40989 Public exploit

    SQL injection in jeecgboot

    SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jeecgboot/jmreport/queryFieldBySql component.

  • Medium 6.1
    CVE-2023-43770 Exploited Public exploit EPSS 64%

    Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

    KEV Feb 12, 2024
  • Unscored —
    CVE-2023-43144 Public exploit

    Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php.