Skip to content
OpenAdvisories

Archive

14 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /14 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

136 results · Feed

  • High 7.8
    CVE-2023-40283

    An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-40305

    GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file.

    indent indent indent Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-40293

    Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection o…

  • High 7.5
    CVE-2023-40274

    zola Path Traversal vulnerability

    An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory traversal. The handle_request function, used by the server to process HTTP requests, does not account fo…

    zola zola Wolfi crates.io
  • Unscored —
    CVE-2023-40518

    LiteSpeed OpenLiteSpeed before 1.7.18 does not strictly validate HTTP request headers.

  • Unscored —
    CVE-2023-40291

    Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an …

  • Unscored —
    CVE-2023-40296 Public exploit

    async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when proc…

  • Unscored —
    CVE-2023-40354

    An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create se…

  • Unscored —
    CVE-2023-40453

    Docker Machine through 0.16.2 allows an attacker, who has control of a worker node, to provide crafted version data, wh…

  • Unscored —
    CVE-2023-40359

    xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neithe…

    xterm xterm xterm Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-40360

    QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for wh…

    qemu Debian
  • Unscored —
    CVE-2023-40292

    Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.

  • Unscored —
    CVE-2023-40295

    libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c.

  • Unscored —
    CVE-2023-40303

    GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of set*id() family functions…

    inetutils inetutils Debian Ubuntu
  • Unscored —
    CVE-2023-37070

    Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS)

  • Unscored —
    CVE-2023-37847

    novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.