Vulnerabilities

e-Gov Client Application for Windows and e-Gov Client Application for macOS open redirect | CVE-2023-44689

October 10, 2023

NAME__________e-Gov Client Application for Windows and e-Gov Client Application for macOS open redirectPlatforms Affected:e-Gov e-Gov Client Application for Windows 2.1.0.0...

GNOME libxml2 denial of service | CVE-2023-45322

October 10, 2023

NAME__________GNOME libxml2 denial of servicePlatforms Affected:GNOME libxml2 2.9.10 GNOME libxml2 2.9.13 GNOME libxml2 2.10.3 GNOME libxml2 2.11.5Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service...

Kofax Power PDF code execution | CVE-2023-42127

October 10, 2023

NAME__________Kofax Power PDF code executionPlatforms Affected:Kofax Power PDF 5.0.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Kofax Power PDF could allow a remote attacker to...

Acronis Agent security bypass | CVE-2023-45246

October 10, 2023

NAME__________Acronis Agent security bypassPlatforms Affected:Acronis Agent 35970 Acronis Agent 36119 Acronis Agent 36280Risk Level:7.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Acronis Agent could allow a...

Acronis Agent information disclosure | CVE-2023-45240

October 10, 2023

NAME__________Acronis Agent information disclosurePlatforms Affected:Acronis Agent 32035 Acronis Agent 31771 Acronis Agent 31637Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Acronis Agent could allow a...

HP Enterprise LaserJet, LaserJet Managed printers cross-site scripting | CVE-2023-5113

October 9, 2023

NAME__________HP Enterprise LaserJet, LaserJet Managed printers cross-site scriptingPlatforms Affected:HP Color LaserJet Enterprise MFP M577 HP Color LaserJet Enterprise Flow MFP...

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

October 8, 2023

NAME__________Ministry of Health, Labour and Welfare FD Application XML external entity injectionPlatforms Affected:Ministry of Health Labour and Welfare FD Application...

Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scripting | CVE-2023-41737

October 8, 2023

NAME__________Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Swifty Bar sticky bar by WPGens Plugin for...

HP Enterprise LaserJet, LaserJet Managed printers cross-site scripting | CVE-2023-5113

October 8, 2023

NAME__________HP Enterprise LaserJet, LaserJet Managed printers cross-site scriptingPlatforms Affected:HP Color LaserJet Enterprise MFP M577 HP Color LaserJet Enterprise Flow MFP...

Personal Management System file upload | CVE-2023-43838

October 7, 2023

NAME__________Personal Management System file uploadPlatforms Affected:Volmarg Personal Management System 1.4.64Risk Level:5.3Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION__________Personal Management System could allow a remote attacker...

Milesight routers information disclosure | CVE-2023-43261

October 7, 2023

NAME__________Milesight routers information disclosurePlatforms Affected:Milesight UR32L 32.3.0.5 Milesight UR5X 35.3.0.6 Milesight UR32 35.3.0.6 Milesight UR35 35.3.0.6 Milesight UR41 35.3.0.6Risk Level:7.5Exploitability:Proof...

IBM Security Directory Suite information disclosure | CVE-2022-33160

October 7, 2023

NAME__________IBM Security Directory Suite information disclosurePlatforms Affected:IBM Security Directory Suite 8.0.1Risk Level:3.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM Security Directory Suite 8.0.1 uses weaker...

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

October 7, 2023

NAME__________Ministry of Health, Labour and Welfare FD Application XML external entity injectionPlatforms Affected:Ministry of Health Labour and Welfare FD Application...

MuseScore buffer overflow | CVE-2023-44428

October 7, 2023

NAME__________MuseScore buffer overflowPlatforms Affected:MuseScore MuseScoreRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________MuseScore is vulnerable to a heap-based buffer overflow, caused by improper bounds checking...

WideStand cross-site scripting | CVE-2023-4090

October 7, 2023

NAME__________WideStand cross-site scriptingPlatforms Affected:Acilia WideStand 5.3.5 Acilia WideStand 5.3.4Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________WideStand is vulnerable to cross-site scripting, caused by improper...

Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scripting | CVE-2023-41737

October 7, 2023

NAME__________Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Swifty Bar sticky bar by WPGens Plugin for...

D-Link DIR-846 code execution | CVE-2023-43284

October 7, 2023

NAME__________D-Link DIR-846 code executionPlatforms Affected:D-Link DIR-846 100A53DBR-RetailRisk Level:6.3Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________D-Link DIR-846 could allow a remote authenticated attacker to...

IBM Robotic Process Automation privilege escalation | CVE-2023-43058

October 7, 2023

NAME__________IBM Robotic Process Automation privilege escalationPlatforms Affected:IBM Robotic Process Automation 23.0.9Risk Level:5.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM Robotic Process Automation 23.0.9 is vulnerable...

Pigcms file upload | CVE-2023-43269

October 7, 2023

NAME__________Pigcms file uploadPlatforms Affected:Pigcms Pigcms 7.0 Pigcms Pigcms 6.9Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Pigcms could allow a remote attacker to upload arbitrary...

Dell EMC SmartFabric software packages command execution | CVE-2023-43069

October 7, 2023

NAME__________Dell EMC SmartFabric software packages command executionPlatforms Affected:Dell EMC SmartFabric Storage Software Debian package for ESXi or Linux KVM 1.4.0...

Milesight routers cross-site scripting | CVE-2023-43260

October 7, 2023

NAME__________Milesight routers cross-site scriptingPlatforms Affected:Milesight UR32L 32.3.0.5 Milesight UR5X 35.3.0.6 Milesight UR32 35.3.0.6 Milesight UR35 35.3.0.6 Milesight UR41 35.3.0.6Risk Level:6.1Exploitability:UnprovenConsequences:Cross-Site...

Vulnerabilities

e-Gov Client Application for Windows and e-Gov Client Application for macOS open redirect | CVE-2023-44689

GNOME libxml2 denial of service | CVE-2023-45322

Kofax Power PDF code execution | CVE-2023-42127

Acronis Agent security bypass | CVE-2023-45246

Acronis Agent information disclosure | CVE-2023-45240

HP Enterprise LaserJet, LaserJet Managed printers cross-site scripting | CVE-2023-5113

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scripting | CVE-2023-41737

HP Enterprise LaserJet, LaserJet Managed printers cross-site scripting | CVE-2023-5113

Personal Management System file upload | CVE-2023-43838

Milesight routers information disclosure | CVE-2023-43261

IBM Security Directory Suite information disclosure | CVE-2022-33160

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

MuseScore buffer overflow | CVE-2023-44428

WideStand cross-site scripting | CVE-2023-4090

Swifty Bar, sticky bar by WPGens plugin for WordPress cross-site scripting | CVE-2023-41737

D-Link DIR-846 code execution | CVE-2023-43284

IBM Robotic Process Automation privilege escalation | CVE-2023-43058

Pigcms file upload | CVE-2023-43269

Dell EMC SmartFabric software packages command execution | CVE-2023-43069

Milesight routers cross-site scripting | CVE-2023-43260

IBM Jazz Foundation information disclosure | CVE-2022-34355

HP Enterprise LaserJet, LaserJet Managed printers cross-site scripting | CVE-2023-5113

Dell EMC SmartFabric software packages HTML injection | CVE-2023-43071

CVE Alert: CVE-2024-13775

CVE Alert: CVE-2024-13612

CVE Alert: CVE-2025-0944

CVE Alert: CVE-2025-0945

CVE Alert: CVE-2025-0946

You may have missed