Skip to content
OpenAdvisories

Archive

21 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /21 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2023-25913

    Authentication Bypass in Danfoss AK-SM800A

    Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.

    Danfoss AK-SM800A
  • High 8.8
    CVE-2023-25914

    Authneticated Path Traversal in Danfoss AK-SM800A

    Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.

    Danfoss AK-SM800A
  • High 8.8
    CVE-2023-36787

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 7.5
    CVE-2023-3604

    Change WP Admin < 1.1.4 - Secret Login Page Disclosure

    The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.

    Web / CMS
  • High 7.5
    CVE-2023-40735

    Butterfly Button Project - Sensitive Information Disclosure

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21.

    Cavo – Connecting for a Safer World BUTTERFLY BUTTON
  • High 8.2
    CVE-2022-46751

    Apache Ivy: XML External Entity vulnerability in Apache Ivy

    Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2. When Apache Ivy prior to 2.5.2 parses XML file…

    Apache Software Foundation Apache Ivy gradle-8 gradle-stage0 Wolfi Maven
  • High 8.8
    CVE-2023-39106

    Nacos Spring vulnerable to Unsafe Deserialization

    An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component.

    com.alibaba.nacos:nacos-spring-context Maven
  • High —
    CVE-2023-39660

    pandasai vulnerable to prompt injection

    An issue in Gaberiele Venturi pandasai v.0.8.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the prompt function.

    pandasai PyPI
  • High 7.5
    CVE-2023-38976

    Weaviate denial of service vulnerability

    An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

    github.com/weaviate/weaviate Go