Skip to content
OpenAdvisories

Archive

25 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /25 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

26 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-4245

    Codehaus-plexus: xml external entity (xxe) injection

    A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue means that text contained in the command string could be interpreted as XML and allow for XML injection.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven
  • Medium 5.4
    CVE-2023-42817

    Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations

    Pimcore admin-ui-classic-bundle provides a Backend UI for Pimcore. The translation value with text including “%s” (from “%suggest%) is parsed by sprintf() even though it’s supposed to be output literally to the user. The translations may be accessible by a us…

    pimcore admin-ui-classic-bundle pimcore/admin-ui-classic-bundle Packagist
  • Medium 4.4
    CVE-2023-4156

    Heap out of bound read in builtin.c

    A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensitive information.

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2023-4476

    Locatoraid Store Locator < 3.9.24 - Reflected XSS

    The Locatoraid Store Locator WordPress plugin before 3.9.24 does not sanitise and escape the lpr-search parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

    Web / CMS
  • Medium 4.8
    CVE-2023-4502

    Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS

    The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capabili…

    Web / CMS
  • Medium 5.3
    CVE-2023-4631 Public exploit

    DoLogin Security < 3.7 - IP Spoofing

    The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing.

    Web / CMS
  • Medium 6.1
    CVE-2023-4148 Scanner template

    Ditty < 3.1.25 - Reflected XSS

    The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

    Web / CMS
  • Medium 5.3
    CVE-2023-4281 Public exploit

    Activity Log < 2.8.8 - IP Spoofing

    This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.

    Web / CMS
  • Medium 5.7
    CVE-2023-4892

    Teedy v1.11 - Stored cross-site scripting (XSS)

    Teedy v1.11 has a vulnerability in its text editor that allows events to be executed in HTML tags that an attacker could manipulate. Thanks to this, it is possible to execute malicious JavaScript in the webapp.

    Teedy Teedy
  • Medium 6.5
    CVE-2023-5158

    Possible dos from guest to host invringh_kiov_advance in vhost driver at drivers/vhost/vringh.c

    A flaw was found in vringh_kiov_advance in drivers/vhost/vringh.c in the host side of a virtio ring in the Linux Kernel. This issue may result in a denial of service from guest to host via zero length descriptor.

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  • Medium 6.7
    CVE-2023-0627

    Docker Desktop 4.11.x allows --no-windows-containers flag bypass

    Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affects Docker Desktop: 4.11.X.

    Docker Docker Desktop
  • Medium 5.6
    CVE-2023-28393

    A stack-based buffer overflow vulnerability exists in the tif_processing_dng_channel_count functionality of Accusoft Im…

    Accusoft ImageGear
  • Medium 6.3
    CVE-2023-5154 EPSS 15%

    D-Link DAR-8000 changelogo.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to u…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5153

    D-Link DAR-8000 querysql.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate th…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5152

    D-Link DAR-7000/DAR-8000 importexport.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argum…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5151 EPSS 81%

    D-Link DAR-8000 autheditpwd.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hid_id leads to sql i…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5150 EPSS 23%

    D-Link DAR-7000/DAR-8000 web.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestri…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5149 EPSS 21%

    D-Link DAR-7000 userattestation.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5148 EPSS 31%

    D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload …

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 5.9
    CVE-2023-41948

    WordPress Cookie Notice & Consent Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christoph Rado Cookie Notice & Consent plugin <= 1.6.0 versions.

    Christoph Rado Cookie Notice & Consent
  • Medium 5.9
    CVE-2023-41949

    WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.

    Avirtum iFolders
  • Medium 6.3
    CVE-2023-5147 EPSS 26%

    D-Link DAR-7000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestri…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5146 EPSS 32%

    D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fi…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 5.3
    CVE-2015-6964

    MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses int…

  • Medium 6.1
    CVE-2023-42426 Public exploit

    Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary c…

  • Medium 5.4
    CVE-2023-43458

    Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitra…