Skip to main content
2023-04-06

2023-04-07

2023-04-08
All (52) Critical (34) High (7) Medium (52)
Newest CVSS EPSS Oldest
CVE-2023-1909 Apr 07, 17:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Bp Monitoring Management System Phpgurukul
NVD GitHub VulDB
CVSS 3.1
6.5
EPSS
0.6%
CVE-2023-27620 Apr 07, 14:15 MEDIUM POC This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Robo Gallery Robogallery
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2023-25442 Apr 07, 14:15 MEDIUM POC This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Zeno Font Resizer
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-23799 Apr 07, 14:15 MEDIUM POC This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Easy Panorama
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-1937 Apr 07, 09:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF My Blog
NVD VulDB
CVSS 3.1
4.3
EPSS
0.3%
CVE-2023-1801 Apr 07, 21:15 MEDIUM PATCH This Month

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Memory Corruption Tcpdump
NVD GitHub
CVSS 3.1
6.5
EPSS
0.8%
CVE-2023-1946 Apr 07, 23:15 MEDIUM This Month

A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Survey Application System
NVD VulDB
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-29388 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Product Catalog Simple Implecode
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-29172 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Propertyhive Wp Property Hive
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-29171 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Magic Post Thumbnail
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28792 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Continuous Image Carosel With Lightbox I13Websolution
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28789 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Contact Forms Cimatti
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28781 Apr 07, 15:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Contact Forms Cimatti
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25713 Apr 07, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Quick Paypal Payments Fullworksplugins
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25711 Apr 07, 13:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Wpglobus Wpglobus Translate Options
NVD
CVSS 3.1
6.1
EPSS
0.3%
CVE-2023-29236 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Outdoor Cththemes
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-28993 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Albo Pretorio On Line Albo Pretorio On Line Project
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25041 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Monolit Cththemes
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2023-25020 Apr 07, 12:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
6.1
EPSS
0.4%
CVE-2022-43309 Apr 07, 21:15 MEDIUM This Month

Supermicro X11SSL-CF HW Rev 1.01, BMC firmware v1.63 was discovered to contain insecure permissions. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure X11Ssl Cf Firmware X11Dac Firmware X11Dai N Firmware X11Ddw L Firmware +143
NVD VulDB
CVSS 3.1
5.5
EPSS
0.2%
CVE-2023-1726 Apr 07, 13:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Proliz OBS allows Stored XSS for an authenticated user.04.01. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Student Affairs Information System Prolizyazilim
NVD
CVSS 3.1
5.4
EPSS
0.2%
CVE-2023-23885 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Quick Contact Form Fullworksplugins
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2023-25061 Apr 07, 09:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2023-23762 Apr 07, 19:15 MEDIUM This Month

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure Github Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.6%
CVE-2023-23761 Apr 07, 19:15 MEDIUM This Month

An improper authentication vulnerability was identified in GitHub Enterprise Server that allowed an unauthorized actor to modify other users' secret gists by authenticating through an SSH certificate. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Github Enterprise Server
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-27810 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_editlist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27808 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27807 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the Delstlist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27806 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the ipqos_lanip_dellist interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27805 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditSTList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27804 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelvsList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27803 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27802 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EditvsList parameter at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-27801 Apr 07, 14:15 MEDIUM This Month

H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the DelDNSHnList interface at /goform/aspForm. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Magic R100 Firmware H3C
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2023-29170 Apr 07, 15:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Enquiry For Woocommerce Piwebsolution
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-29094 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Product Page Shipping Calculator For Woocommerce Piwebsolution
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25712 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Google Google Analytics Opt Out
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25705 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Prayer Goprayer
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25702 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Quick Paypal Payments Fullworksplugins
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25464 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Twitch Player Streamweasels
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25716 Apr 07, 12:15 MEDIUM This Month

Auth (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gqevu6bsiz Announce from the Dashboard plugin <= 1.5.1 versions. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Announce From The Dashboard
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25049 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Ecommerce Product Catalog Implecode
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25031 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Arigato Autoresponder And Newsletter Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-23994 Apr 07, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Auto Hide Admin Bar
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25027 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Chained Quiz Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25024 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Icegram Icegram Collect
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25023 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Webinarignition Saleswonder
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25022 Apr 07, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Watu Quiz Kibokolabs
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-25046 Apr 07, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Podlove Podcast Publisher Podlove
NVD
CVSS 3.1
4.8
EPSS
0.4%
CVE-2023-24398 Apr 07, 10:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ezp Coming Soon Page Snapcreek
NVD
CVSS 3.1
4.8
EPSS
0.4%
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy