Skip to main content
2023-04-06

2023-04-07

2023-04-08
All (93) Critical (34) High (7) Medium (52)
Newest CVSS EPSS Oldest
CVE-2023-29171 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Magic Post Thumbnail
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28792 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Continuous Image Carosel With Lightbox I13Websolution
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28789 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Contact Forms Cimatti
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28781 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Contact Forms Cimatti
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25713 Apr 07, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Quick Paypal Payments Fullworksplugins
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25711 Apr 07, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Wpglobus Wpglobus Translate Options
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-29236 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Outdoor Cththemes
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28993 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Albo Pretorio On Line Albo Pretorio On Line Project
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25041 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monolit Cththemes
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25020 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2022-43309 Apr 07, 21:15 MEDIUM This Month

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware +143
NVD VulDB
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-1726 Apr 07, 13:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user.04.01. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Student Affairs Information System Prolizyazilim
NVD
CVSS 3.1
5.4
EPSS
0.2%
CVE-2023-23885 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Quick Contact Form Fullworksplugins
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2023-25061 Apr 07, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2023-23762 Apr 07, 19:15 MEDIUM This Month

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Github Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2023-23761 Apr 07, 19:15 MEDIUM This Month

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Github Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-27810 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27808 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27807 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27806 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27805 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27804 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27803 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27802 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27801 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-29170 Apr 07, 15:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Enquiry For Woocommerce Piwebsolution
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-29094 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Page Shipping Calculator For Woocommerce Piwebsolution
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25712 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Google Google Analytics Opt Out
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25705 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Prayer Goprayer
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25702 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Quick Paypal Payments Fullworksplugins
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25464 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Twitch Player Streamweasels
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25716 Apr 07, 12:15 MEDIUM This Month

Auth (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gqevu6bsiz Announce from the Dashboard plugin <= 1.5.1 versions. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Announce From The Dashboard
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25049 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Ecommerce Product Catalog Implecode
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25031 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-23994 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Auto Hide Admin Bar
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25027 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Chained Quiz Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25024 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Icegram Icegram Collect
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25023 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Webinarignition Saleswonder
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25022 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Watu Quiz Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25046 Apr 07, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Podlove Podcast Publisher Podlove
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-24398 Apr 07, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ezp Coming Soon Page Snapcreek
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25059 Apr 07, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Avalex
NVD
CVSS 3.1
4.8
EPSS
0.5%
CVE-2023-24402 Apr 07, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Booking System Wpbookingsystem
NVD
CVSS 3.1
4.8
EPSS
0.4%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy