Skip to content
OpenAdvisories

Archive

31 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /31 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.5
    CVE-2023-3825

    PTC’s KEPServerEX Versions 6.0 to 6.14.263 are vulnerable to being made to read a recursively defined object that leads…

    PTC KEPServerEX
  • High 7.8
    CVE-2023-4004

    Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()

    A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their pr…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 8.6
    CVE-2023-3997

    Unauthenticated Log Injection In Splunk SOAR

    Splunk SOAR versions lower than 6.1.0 are indirectly affected by a potential vulnerability accessed through the user’s terminal. A third party can send Splunk SOAR a maliciously crafted web request containing special ANSI characters to cause log file poisonin…

    Splunk Splunk SOAR (Cloud) Splunk SOAR (On-premises)
  • High 8.2
    CVE-2023-34360

    ASUS RT-AX88U - Stored XSS

    A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.  After a remote attacker logging in device with regular user privilege, the remote atta…

    ASUS RT-AX88U
  • High 7.5
    CVE-2023-34359

    ASUS RT-AX88U - Out-of-bounds Read - 2

    ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to the device which causes the httpd binary to crash within the "do_json_decode()" function of ej.c, resulting in a DoS condition.

    ASUS RT-AX88U
  • High 7.5
    CVE-2023-34358

    ASUS RT-AX88U - Out-of-bounds Read - 1

    ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary to crash during a string comparison performed within web.c,…

    ASUS RT-AX88U
  • High 7.5
    CVE-2023-24971

    IBM B2B Advanced Communication denial of service

    IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976.

    IBM Multi-Enterprise Integration Gateway B2B Advanced Communications
  • High 7.4
    CVE-2022-43831

    IBM Spectrum Scale privilege escalation

    IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.6.1 could allow a local user to obtain escalated privileges on a host without proper security context settings configured. IBM X-Force ID: 238941.

    IBM Storage Scale Container Native Storage Access
  • High 7.2
    CVE-2023-35019

    IBM Security Verify Governance command execution

    IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.

    IBM Security Verify Governance Identity Manager
  • High 8.8
    CVE-2023-4007

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.8
    CVE-2023-4006

    Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq

    Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.8
    CVE-2023-36092

    Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via…