Skip to content
OpenAdvisories

Archive

15 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /15 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-4344

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection

    Intel Broadcom LSI Storage Authority (LSA) RAID Web Console 3 (RWC3)
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    ivanti EPMM Network devices
    KEV Jan 18, 2024
  • Critical 9.8
    CVE-2023-39659

    LangChain vulnerable to arbitrary code execution

    An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.

    langchain PyPI
  • Critical 9.8
    CVE-2023-39852

    Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php. N…

  • Critical 9.8
    CVE-2023-39661

    PandasAI vulnerable to arbitrary code execution

    An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.

    pandasai PyPI
  • Critical 9.8
    CVE-2023-39851

    webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php. NOTE…

  • Critical 9.8
    CVE-2023-39662

    llama-index vulnerable to arbitrary code execution

    An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.

    llama-index PyPI
  • Critical 9.8
    CVE-2023-38896

    LangChain vulnerable to arbitrary code execution

    An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.

    langchain PyPI
  • Critical 9.8
    CVE-2023-38889

    Alluxio vulnerable to arbitrary code execution

    An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroups(java.lang.String).

    org.alluxio:alluxio-parent Maven
  • Critical 9.8
    CVE-2023-38860

    LangChain vulnerable to arbitrary code execution

    An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

    langchain PyPI