Skip to content
OpenAdvisories

Archive

2 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /2 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • High 7.1
    CVE-2023-31926

    Arbitrary File Overwrite using less command

    System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.

    Brocade Fabric OS
  • Medium 4.8
    CVE-2023-3500

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A reflected XSS was possible when creating specific PlantUML di…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2023-3900

    Improper Validation of Specified Type of Input in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. An invalid 'start_sha' value on merge requests page may lead to Denial of Service as Changes tab would not loa…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.9
    CVE-2023-3993

    Insertion of Sensitive Information into Log File in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Access tokens may have been logged when a query was made to a spec…

    GitLab GitLab Web / CMS
  • High 7.5
    CVE-2023-3994

    Inefficient Regular Expression Complexity in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. A Regular Expression Denial of Service was possible via sending …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2023-31927

    An information disclosure in the web interface of Brocade Fabric OS

    An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about the web interface.

    Brocade Fabric OS
  • Unscored —
    CVE-2023-33383 Public exploit

    Shelly 4PM Pro four-channel smart switch 0.11.0 allows an attacker to trigger a BLE out of bounds read fault condition …

  • Unscored —
    CVE-2023-33257

    Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat.

  • Unscored —
    CVE-2023-39113

    ngiflib commit fb271 was discovered to contain a segmentation violation via the function "main" at gif2tag.c. This vuln…

  • Unscored —
    CVE-2023-39114

    ngiflib commit 84a75 was discovered to contain a segmentation violation via the function SDL_LoadAnimatedGif at ngiflib…

  • Unscored —
    CVE-2023-38330

    OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administra…

  • Unscored —
    CVE-2023-36081

    Cross Site Scripting vulnerability in GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W allows a remote attacker to ex…

  • High 7.0
    CVE-2023-26317

    Xiaomi router external request interface has command injection

    Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upp…

    Xiaomi Xiaomi Router
  • Unscored —
    CVE-2023-26316

    A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's wh…

  • Unscored —
    CVE-2022-46485 Public exploit

    Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a surve…

  • Unscored —
    CVE-2022-46484 Public exploit

    Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and be…