Skip to content
OpenAdvisories

Archive

17 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /17 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

63 results · Clear filters · Feed

  • Medium 6.9
    CVE-2023-51733

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Identity parameter under Local endpoint settings at its web interface. A remote attacker could exploit this vulnerability by su…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51732

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the IPsec Tunnel Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially cra…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51731

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Hostname parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted inpu…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51730

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51729

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the DDNS Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51728

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Password parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51727

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Username parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51726

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the SMTP Server Name parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially craf…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51725

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Contact Email Address parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51724

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the URL parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted input to …

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51723

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Description parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted i…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51722

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 3 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51721

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 2 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51720

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Time Server 1 parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted…

    Hathway Skyworth Router CM5100
  • Medium 6.9
    CVE-2023-51719

    Stored Cross Site Scripting Vulnerability in Skyworth Router

    This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to insufficient validation of user supplied input for the Traceroute parameter at its web interface. A remote attacker could exploit this vulnerability by supplying specially crafted in…

    Hathway Skyworth Router CM5100
  • Medium 6.5
    CVE-2023-36235

    An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the id_order parameter.

  • Medium 6.1
    CVE-2023-48858 Public exploit

    A Cross-site scripting (XSS) vulnerability in login page php code in Armex ABO.CMS 5.9 allows remote attackers to injec…

  • Medium 6.1
    CVE-2023-46952

    Cross Site Scripting vulnerability in ABO.CMS v.5.9.3 allows an attacker to execute arbitrary code via a crafted payloa…

  • Medium 6.1
    CVE-2023-25295

    A Cross Site Scripting (XSS) vulnerability in evewa3ajax.php in GRUEN eVEWA3 Community 31 through 53 allows attackers t…

  • Medium 5.4
    CVE-2023-52069

    kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.

  • Medium 4.6
    CVE-2023-49515

    Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allo…

  • Medium 6.5
    CVE-2024-23525

    The Spreadsheet::ParseXLSX package before 0.30 for Perl allows XXE attacks because it neglects to use the no_xxe option…

    libspreadsheet-parsexlsx-perl libspreadsheet-parsexlsx-perl Debian Ubuntu
  • Medium 6.1
    CVE-2024-22714

    Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.