Skip to content
OpenAdvisories

Archive

25 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /25 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

93 results · Feed

  • Unscored —
    CVE-2023-43256

    A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the…

  • Unscored —
    CVE-2023-43326 Public exploit Scanner template

    A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to st…

  • Unscored —
    CVE-2023-43278

    A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an a…

  • Unscored —
    CVE-2023-43319

    Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute ar…

  • Unscored —
    CVE-2023-43382

    Directory Traversal vulnerability in itechyou dreamer CMS v.4.1.3 allows a remote attacker to execute arbitrary code vi…

  • Unscored —
    CVE-2023-43339 Public exploit

    Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code vi…

  • Unscored —
    CVE-2023-43457

    An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter i…

  • Critical 9.8
    CVE-2023-43131

    General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.

  • Unscored —
    CVE-2023-43456

    Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbi…

  • Unscored —
    CVE-2023-43325 Public exploit Scanner template

    A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows att…

  • Unscored —
    CVE-2023-43141

    TOTOLINK A3700R V9.1.2u.6134_B20201202 and N600R V5.3c.5137 are vulnerable to Incorrect Access Control.

  • Unscored —
    CVE-2023-43132

    szvone vmqphp <=1.13 is vulnerable to SQL Injection. Unauthorized remote users can use sql injection attacks to obtain …

  • Medium 5.4
    CVE-2023-43458

    Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitra…