Skip to content
OpenAdvisories

Archive

1 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /1 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-31928

    XSS vulnerability in Brocade Webtools

    A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target u…

    Brocade Fabric OS
  • Medium 5.5
    CVE-2023-31428

    CLI allows upload or transfer files of dangerous types

    Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that could allow a local user to dump files under user's home directory using grep.

    Brocade Fabric OS
  • Medium 6.5
    CVE-2023-0632

    Inefficient Regular Expression Complexity in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible by using crafted …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2023-2164 EPSS 66%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 15.9 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. It was possible for an attacker to trigger a stored XSS vulnerability…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.3
    CVE-2023-3385

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project 'from export…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2023-31430

    buffer overflow vulnerability in “secpolicydelete” command

    A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0 could allow an authenticated privileged user to crash the Brocade Fabric OS switch leading to a denial of service.

    Brocade Brocade Fabric OS
  • Medium 5.5
    CVE-2023-31431

    A buffer overflow vulnerability in “diagstatus” command

    A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and v9.1.1c could allow an authenticated user to crash the Brocade Fabric OS switch leading to a denial of service.

    Brocade Fabric OS
  • Medium 4.3
    CVE-2023-3735

    Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote att…

    Google Chrome chromium Browsers Debian
  • Medium 6.8
    CVE-2023-31426

    scp, sftp, ftp servers passwords in supportsave

    The Brocade Fabric OS Commands “configupload” and “configdownload” before Brocade Fabric OS v9.1.1c, v8.2.3d, v9.2.0 print scp, sftp, ftp servers passwords in supportsave. This could allow a remote authenticated attacker to access sensitive information.

    Brocade Brocade Fabric OS
  • Medium 5.5
    CVE-2023-31429

    Multiple commands print sensitive information in the terminal

    Brocade Fabric OS before Brocade Fabric OS 9.1.1c, 9.2.0 contains a vulnerability when using various commands such as “chassisdistribute”, “reboot”, “rasman”, errmoduleshow, errfilterset, hassiscfgperrthreshold, supportshowcfgdisable and supportshowcfgenable …

    Brocade Fabric OS
  • Medium 6.5
    GHSA-xqcq-j8w9-3pxv

    Jettison parser crash by stackoverflow

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

    com.tencyle.fixes:org.codehaus.jettison--jettison Maven
  • Medium 5.5
    CVE-2023-38560

    Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

    An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  • Medium 5.5
    CVE-2023-38559

    Ghostscript: out-of-bound read in base/gdevdevn.c:1973 in devn_pcx_write_rle could result in dos

    A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Wolfi
  • Medium 5.4
    CVE-2023-23548

    XSS in business intelligence

    Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.

    Checkmk Checkmk check-mk Ubuntu
  • Medium 4.0
    CVE-2023-34552

    In certain EZVIZ products, two stack based buffer overflows in mulicast_parse_sadp_packet and mulicast_get_pack_type fu…