CVEs published September 17, 2023
18 CVEs were published on September 17, 2023: 0 critical, 1 high.
- Published
- 18
- Critical
- 0
- High
- 1
- Medium
- 10
- Low
- 6
- Unrated
- 1
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Tongda OA
- 4
- 07FLY CRM
- 1
- China Unicom TEWA-800G
- 1
- DedeCMS
- 1
- KOHA
- 1
- lmxcms
- 1
- mccms
- 1
- Planno
- 1
- Revive Adserver
- 1
- Sakshi2610 Food Ordering Website
- 1
High 1
Medium, low and unrated 17
- CVE-2023-5030Tongda OA delete.php sql injectionTongda OA
- CVE-2023-5029mccms 1 sql injectionmccms
- CVE-2023-5027SourceCodester Simple Membership System club_validator.php sql injectionSourceCodester Simple Membership System
- CVE-2023-5028China Unicom TEWA-800G debug log fileChina Unicom TEWA-800G
- CVE-2023-5026Tongda OA cross site scriptingTongda OA
- CVE-2023-5025KOHA MARC search.pl cross site scriptingKOHA
- CVE-2023-5024Planno Comment cross site scriptingPlanno
- CVE-2023-5023Tongda OA delete.php sql injectionTongda OA
- CVE-2023-5022DedeCMS select_templets_post.php absolute path traversalDedeCMS
- CVE-2023-5021SourceCodester AC Repair and Services System cross site scriptingSourceCodester AC Repair and Services System
- CVE-2023-38040A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..Revive Adserver
- CVE-2023-5019Tongda OA delete.php sql injectionTongda OA
- CVE-2023-5018SourceCodester Lost and Found Information System POST Parameter sql injectionSourceCodester Lost and Found Information System
- CVE-2023-5017lmxcms admin.php sql injectionlmxcms
- CVE-2023-5016spider-flow API DataSourceController.java DriverManager.getConnection deserializationspider-flow
- CVE-2023-5015UCMS cross site scriptingUCMS
- CVE-2023-5014Sakshi2610 Food Ordering Website categoryfood.php sql injectionSakshi2610 Food Ordering Website