Skip to content
OpenAdvisories

Archive

9 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /9 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.6
    CVE-2023-33242 Public exploit

    Lindell17 TSS Abort Mishandling

    Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt (256 in total) because of not adhering to the paper's security proof's assumption rega…

    Lindell TSS Implementations Wallet
  • Critical 9.6
    CVE-2023-33241

    GG18 / GG20 TSS Beta Parameter Vulnerability

    Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation,…

    GG TSS Implementations Wallet
  • Critical 9.1
    CVE-2023-39969

    uthenticode signature validation bypass vulnerability

    uthenticode is a small cross-platform library for partially verifying Authenticode digital signatures. Version 1.0.9 of uthenticode hashed the entire file rather than hashing sections by virtual address, in violation of the Authenticode specification. As a re…

    trailofbits uthenticode
  • Critical 9.8
    CVE-2023-3632

    Hard-coded Cryptographic Key in Kunduz - Homework Helper App

    Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3.

    Sifir Bes Education and Informatics Kunduz - Homework Helper App
  • Critical 9.1
    CVE-2023-38208

    Validate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code exe…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  • Critical 9.1
    CVE-2023-33934

    Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies

    Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.

    Apache Software Foundation Apache Traffic Server trafficserver trafficserver Debian Ubuntu