Skip to content
OpenAdvisories

Archive

2 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /2 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 7.8
    CVE-2023-38418

    BIG-IP Edge Client for macOS vulnerability

    The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

    F5 BIG-IP Edge Client Network devices Browsers
  • High 7.5
    CVE-2023-38138

    BIG-IP Configuration utility vulnerability

    A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End o…

    F5 BIG-IP Network devices
  • High 7.1
    CVE-2023-36858

    BIG-IP Edge Client for Windows and macOS vulnerability

    An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluate…

    F5 BIG-IP Edge Client Network devices Browsers
  • High 8.1
    CVE-2022-40609

    IBM SDK, Java Technology Edition code execution

    IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute a…

    IBM SDK, Java Technology Edition
  • High 7.5
    CVE-2023-26451

    Functions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization…

    OX Software OX App Suite
  • High 7.1
    CVE-2023-26440

    The cacheservice API could be abused to indirectly inject parameters with SQL syntax which was insufficiently sanitized…

    OX Software OX App Suite
  • High 7.6
    CVE-2023-26439

    The cacheservice API could be abused to inject parameters with SQL syntax which was insufficiently sanitized before get…

    OX Software OX App Suite
  • High 7.1
    CVE-2023-31926

    Arbitrary File Overwrite using less command

    System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.

    Brocade Fabric OS
  • High 7.5
    CVE-2023-3994

    Inefficient Regular Expression Complexity in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.0
    CVE-2023-26317

    Xiaomi router external request interface has command injection

    Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upp…

    Xiaomi Xiaomi Router