Skip to content
OpenAdvisories

Archive

20 October 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-5070 Public exploit

    Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure

    The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that inc…

  • Critical 9.8
    CVE-2023-34051 Public exploit EPSS 48%

    VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor ca…

  • Unscored —
    CVE-2023-40361 Public exploit

    SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker…

  • Unscored —
    CVE-2023-43354 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…

  • Unscored —
    CVE-2023-43356 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…

  • Unscored —
    CVE-2023-43346 Public exploit

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary c…

  • Unscored —
    CVE-2023-43355 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…

  • Unscored —
    CVE-2023-43357 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…

  • Unscored —
    CVE-2023-43353 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…