CVEs published September 10, 2023
11 CVEs were published on September 10, 2023: 0 critical, 1 high.
- Published
- 11
- Critical
- 0
- High
- 1
- Medium
- 8
- Low
- 2
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- SourceCodester Contact Manager App
- 5
- hamza417/inure
- 2
- instantsoft/icms2
- 2
- Byzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- 1
- Xintian Smart Table Integrated Management System
- 1
High 1
Medium, low and unrated 10
- CVE-2023-4879Cross-site Scripting (XSS) - Stored in instantsoft/icms2instantsoft/icms2
- CVE-2023-4878Server-Side Request Forgery (SSRF) in instantsoft/icms2instantsoft/icms2
- CVE-2023-4873Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injectionByzoro Smart S45F Multi-Service Secure Gateway Intelligent…
- CVE-2023-4872SourceCodester Contact Manager App add.php sql injectionSourceCodester Contact Manager App
- CVE-2023-4871SourceCodester Contact Manager App delete.php sql injectionSourceCodester Contact Manager App
- CVE-2023-4870SourceCodester Contact Manager App Contact Information index.php cross site scriptingSourceCodester Contact Manager App
- CVE-2023-4869SourceCodester Contact Manager App update.php cross-site request forgerySourceCodester Contact Manager App
- CVE-2023-4868SourceCodester Contact Manager App add.php cross-site request forgerySourceCodester Contact Manager App
- CVE-2023-4877Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inurehamza417/inure
- CVE-2023-4867Xintian Smart Table Integrated Management System Added Site Page AddUpdateSites.aspx sql injectionXintian Smart Table Integrated Management System