Skip to content
OpenAdvisories

Archive

27 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /27 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

146 results · Feed

  • Unscored —
    CVE-2023-44021

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetCli…

  • Unscored —
    CVE-2023-44020

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security p…

  • High 8.8
    CVE-2023-44013

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list param…

  • High 8.8
    CVE-2023-44015

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTi…

  • Unscored —
    CVE-2023-44047

    Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.

  • Unscored —
    CVE-2023-44022

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir …

  • High 8.8
    CVE-2023-44014

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the for…

  • High 8.8
    CVE-2023-44016

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId p…

  • High 8.8
    CVE-2023-44017

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone p…

  • Unscored —
    CVE-2023-44048

    Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category.

  • Unscored —
    CVE-2023-44080

    An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted reques…

  • Unscored —
    CVE-2023-44023

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid param…

  • High 8.8
    CVE-2023-44019

    Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parame…

  • Unscored —
    CVE-2023-41449

    An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to …

  • Unscored —
    CVE-2023-41452

    Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary…

  • Unscored —
    CVE-2023-41445

    Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code …

  • Unscored —
    CVE-2023-41451

    Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code …

  • Unscored —
    CVE-2023-41453

    Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code …

  • Unscored —
    CVE-2023-41448

    Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code …

  • Unscored —
    CVE-2023-43192

    SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by us…

  • High 7.5
    CVE-2023-43314

    ** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.…

    Zyxel PMG2005-T20B Network devices
  • Medium 5.4
    CVE-2023-43828

    Subrion CMS Cross-site Scripting vulnerability in /panel/languages

    A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.

    intelliants/subrion Packagist
  • Medium 5.4
    CVE-2023-43830

    Subrion CMS XSS in /panel/configuration/financial/

    A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: 'Minimum deposit', 'Maximum deposit' and/or 'Maximum …

    intelliants/subrion Packagist
  • Unscored —
    CVE-2023-43191

    SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the commen…

  • Unscored —
    CVE-2023-43320

    An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Prox…

  • Unscored —
    CVE-2023-43233

    A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers t…