Skip to content
OpenAdvisories

Archive

30 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /30 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Medium 5.4
    CVE-2023-43710

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1][MODULE_SHIPPING_PERCENT_TEXT_TITLE]" parameter, potentially leading to unauthorized execut…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43709

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE)" parameter, potentially leading to unauthorized execution of scripts within a user…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43708

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE_PAYMENT_SAGE_PAY_SERVER_TEXT_TITLE)" parameter, potentially leading to unauthorized…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43707

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][name] " parameter, potentially leading to unauthorized execution of scripts within…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43706

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templates_key" parameter, potentially leading to unauthorized execution of scripts within a user's web brow…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43705

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_value[1]" parameter, potentially leading to unauthorized execution of scripts within a user's web bro…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43704

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43703

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[][name]" parameter, potentially leading to unauthorized execution of scripts within a user's web bro…

    Os Commerce Os Commerce
  • Medium 5.4
    CVE-2023-43702

    Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)

    Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_number" parameter, potentially leading to unauthorized execution of scripts within a user's web browser.

    Os Commerce Os Commerce
  • Critical 9.0
    CVE-2023-5320

    Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 5.8
    CVE-2023-5318

    Use of Hard-coded Credentials in microweber/microweber

    Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 6.3
    CVE-2023-5317

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Critical 9.1
    CVE-2023-5316

    Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.3
    CVE-2023-5319

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 6.5
    CVE-2023-5227

    Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

    Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Unscored —
    CVE-2023-44488

    VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

    mozjs38 mozjs52 mozjs68 mozjs78 Debian Ubuntu Azure Linux