CVEs published July 15, 2023
12 CVEs were published on July 15, 2023: 1 critical, 2 high.
- Published
- 12
- Critical
- 1
- High
- 2
- Medium
- 4
- Low
- 1
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Plane
- 2
- SourceCodester Lost and Found Information System
- 2
- Campcodes Retro Cellphone Online Store
- 1
- CleverTap Cordova Plugin · clevertap-cordova
- 1
- Nesote Inout Blockchain EasyPayments
- 1
- SourceCodester AC Repair and Services System
- 1
Critical 1
High 2
Medium, low and unrated 9
- CVE-2023-3682Nesote Inout Blockchain EasyPayments POST Parameter getcoinaddress sql injectionNesote Inout Blockchain EasyPayments
- CVE-2023-3681Campcodes Retro Cellphone Online Store modal_add_product.php cross site scriptingCampcodes Retro Cellphone Online Store
- CVE-2023-3680SourceCodester Lost and Found Information System HTTP POST Request sql injectionSourceCodester Lost and Found Information System
- CVE-2023-3679SourceCodester Lost and Found Information System HTTP POST Request sql injectionSourceCodester Lost and Found Information System
- CVE-2023-3678SourceCodester AC Repair and Services System HTTP POST Request sql injectionSourceCodester AC Repair and Services System
- CVE-2021-31294Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specificall
- CVE-2023-35802IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploit
- CVE-2023-38349PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller.
- CVE-2023-38350PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters.