PUBLIÉES EN

septembre 2023

2 828 CVE, des plus récentes aux plus anciennes.

← août 2023 octobre 2023 →

CVE-2023-5112Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type_name[1]" parameter, … 5.4 MOYENNE

CVE-2023-5111Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type_name[1]" parameter, … 5.4 MOYENNE

CVE-2023-43735Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_titles[7]" parameter, pote… 5.4 MOYENNE

CVE-2023-43734Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" parameter, potentially leadi… 5.4 MOYENNE

CVE-2023-43733Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_address" parameter, potent… 5.4 MOYENNE

CVE-2023-43732Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_title" parameter, potent… 5.4 MOYENNE

CVE-2023-43731Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" parameter, potentially … 5.4 MOYENNE

CVE-2023-43730Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_name[1]" parameter, pote… 5.4 MOYENNE

CVE-2023-43729Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_name[1]" parameter, pot… 5.4 MOYENNE

CVE-2023-43728Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_delivery_terms_text[1]" para… 5.4 MOYENNE

CVE-2023-43727Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indication_text[1]" paramete… 5.4 MOYENNE

CVE-2023-43726Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_manual_name… 5.4 MOYENNE

CVE-2023-43725Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_products_status_name_long[1… 5.4 MOYENNE

CVE-2023-43724Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtjuhh2cn5chn2qjbm2stgmfa… 5.4 MOYENNE

CVE-2023-43723Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_name[1]" parameter, … 5.4 MOYENNE

CVE-2023-43722Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status_groups_name[1]" para… 5.4 MOYENNE

CVE-2023-43721Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS_SUMMARY_TITLE[1]" pa… 5.4 MOYENNE

CVE-2023-43720Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDER_TITLE[1]" parameter… 5.4 MOYENNE

CVE-2023-43719Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GENDER_TITLE[1]" paramete… 5.4 MOYENNE

CVE-2023-43718Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABLE_TITLE[1]" parameter… 5.4 MOYENNE

CVE-2023-43717Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHLIGHT_ENABLE_TITLE[1]"… 5.4 MOYENNE

CVE-2023-43716Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_NEW_PRODUCTS_TITLE[1]"… 5.4 MOYENNE

CVE-2023-43715Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_NAME_MIN_LENGTH_TITLE[… 5.4 MOYENNE

CVE-2023-43714Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAGE_TITLE[1]" parameter… 5.4 MOYENNE

CVE-2023-43713Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/admin/admin-menu/add-sub… 5.4 MOYENNE

CVE-2023-43712Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels_name" parameter, pot… 5.4 MOYENNE

CVE-2023-44488Les systèmes utilisant la bibliothèque libvpx pour encoder des vidéos VP9 sont vulnérables à un plantage pouvant entraîner un déni de service. Un attaquant peut déclencher cet inci… 7.5 ÉLEVÉE

CVE-2022-4956La version 19.7 de Caphyon Advanced Installer est affectée par une faille de chemin de recherche non contrôlé dans son gestionnaire de DLL WinSxS. Un utilisateur local disposant de… 7.8 ÉLEVÉE

CVE-2023-5313A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file ajax-poll.php of the co… 5.3 MOYENNE

CVE-2023-5305A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /mail.php of the comp… 3.5 FAIBLE

CVE-2023-5304A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /book-serv… 3.5 FAIBLE

CVE-2023-5321Missing Authorization in GitHub repository hamza417/inure prior to build94. 5.5 MOYENNE

CVE-2023-5303A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the co… 3.5 FAIBLE

CVE-2023-5302A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown processing of the compone… 3.5 FAIBLE

CVE-2023-5301A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument … 4.7 MOYENNE

CVE-2023-5300A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads to sql injection. It i… 6.3 MOYENNE

CVE-2023-5207Les éditions Community et Enterprise de GitLab (versions 16.0 à 16.4) sont affectées par une faille qui permet à un utilisateur connecté de déclencher des pipelines CI/CD en se fai… 8.2 ÉLEVÉE

CVE-2023-5298A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.… 5.5 MOYENNE

CVE-2023-5295The Comments by Startbit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4 due to insufficient i… 6.4 MOYENNE

CVE-2023-5201Les sites WordPress utilisant l'extension OpenHook (version 4.3.0 et antérieures) sont concernés si le paramètre du shortcode `[php]` est activé. Un attaquant disposant d'un simple… 9.9 CRITIQUE

CVE-2023-43711Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstname" parameter, potent… 5.4 MOYENNE

CVE-2023-43710Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1][MODULE_SHIP… 5.4 MOYENNE

CVE-2023-43709Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE)" pa… 5.4 MOYENNE

CVE-2023-43708Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration_title[1](MODULE_PAYM… 5.4 MOYENNE

CVE-2023-43707Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageDescriptionForm[1][nam… 5.4 MOYENNE

CVE-2023-43706Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templates_key" parameter, po… 5.4 MOYENNE

CVE-2023-43705Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_value[1]" parameter, p… 5.4 MOYENNE

CVE-2023-43704Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "title" parameter, potentially lead… 5.4 MOYENNE

CVE-2023-43703Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[][name]" parameter, p… 5.4 MOYENNE

CVE-2023-43702Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_number" parameter, potent… 5.4 MOYENNE