Skip to content
OpenAdvisories

Archive

23 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /23 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.0
    CVE-2023-41028

    Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability

    A stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.

    Juplink RX4-1500
  • Critical 9.9
    CVE-2023-40177

    XWiki Platform privilege escalation (PR) from account through AWM content fields

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can use the content field of their user profile page to execute arbitrary scripts with programming rights, thus effectively performing…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-appwithinminutes-ui Maven
  • Critical 9.1
    CVE-2023-40176 EPSS 80%

    SXSS in the user profile via the timezone displayer

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any registered user can exploit a stored XSS through their user profile by setting the payload as the value of the time zone user preference. Even though …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-web-templates Maven
  • Critical 9.8
    CVE-2023-4041

    Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentica…

    Silicon Labs Gecko Bootloader
  • Critical 9.8
    CVE-2023-4404

    Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation

    The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to …

    smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More Web / CMS