Skip to content
OpenAdvisories

Archive

14 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /14 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-20965

    In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic…

    Google Android Android
  • Critical 9.9
    CVE-2023-40020

    Improper Authentication in PrivateUploader

    PrivateUploader is an open source image hosting server written in Vue and TypeScript. In affected versions `app/routes/v3/admin.controller.ts` did not correctly verify whether the user was an administrator (High Level) or moderator (Low Level) causing the req…

    PrivateUploader PrivateUploader
  • Critical 9.1
    CVE-2023-3267

    When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field. …

    CyberPower PowerPanel Enterprise
  • Critical 9.8
    CVE-2023-3266

    A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all…

    CyberPower PowerPanel Enterprise
  • Critical 9.8
    CVE-2023-3265

    An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the use…

    CyberPower PowerPanel Enterprise
  • Critical 9.8
    CVE-2023-3259

    The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By ma…

    Dataprobe iBoot PDU
  • Critical 9.8
    CVE-2023-39292

    A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could…

  • Critical 9.8
    CVE-2023-39293

    A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which c…

  • Critical 9.8
    CVE-2023-29468 EPSS 10%

    The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC…