Skip to content
OpenAdvisories

Archive

15 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /15 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Unscored —
    CVE-2023-20564 Public exploit

    Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged a…

    AMD Ryzen™ Master
  • Medium 4.9
    CVE-2023-40028 Public exploit EPSS 66%

    Arbitrary file read via symlinks in Ghost

    Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability which allows authenticated users to upload files that are symlinks. This can be exploited to perform an arbitrary file read of any file on the host oper…

    TryGhost Ghost ghost npm
  • High 8.8
    CVE-2023-4357 Public exploit EPSS 47%

    Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to …

    Google Chrome chromium Browsers Debian
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    ivanti EPMM Network devices
    KEV Jan 18, 2024
  • High 7.5
    CVE-2023-2916 Public exploit EPSS 24%

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract s…

    revmakx InfiniteWP Client Web / CMS
  • Unscored —
    CVE-2023-38840 Public exploit

    Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwa…