Skip to content
OpenAdvisories

Archive

23 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /23 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

61 results · Feed

  • Medium 5.9
    CVE-2023-32496

    WordPress StopBadBots Plugin <= 7.31 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin <= 7.31 versions.

    Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection
  • High 7.1
    CVE-2023-32236

    WordPress Booking Ultra Pro Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin <= 1.1.8 versions.

    Booking Ultra Pro Booking Ultra Pro Appointments Booking Calendar Plugin
  • Medium 5.8
    CVE-2023-32119

    WordPress WPO365 | Mail Integration for Office 365 / Outlook Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPO365 | Mail Integration for Office 365 / Outlook plugin <= 1.9.0 versions.

    wpo365 WPO365 | Mail Integration for Office 365 / Outlook
  • Medium 5.5
    CVE-2023-4042

    Ghostscript: incomplete fix for cve-2020-16305

    A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux
  • High 7.8
    CVE-2023-3899

    Subscription-manager: inadequate authorization of com.redhat.rhsm1 d-bus interface allows local users to modify configuration

    A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Azure Linux
  • Critical 9.8
    CVE-2023-4041

    Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Out-of-bounds Write, Download of Code Without Integrity Check vulnerability in Silicon Labs Gecko Bootloader on ARM (Firmware Update File Parser modules) allows Code Injection, Authentica…

    Silicon Labs Gecko Bootloader
  • Medium 5.4
    CVE-2023-40282

    Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in …

    Rakuten Mobile Rakuten WiFi Pocket
  • Unscored —
    CVE-2023-40144

    OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary O…

    CBC NR4H, NR8H, NR16H series NR-4M, NR-8M, NR-16M series DR-16M, DR-8M, DR-4M51 series
  • High 8.8
    CVE-2023-40158

    Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary O…

    CBC DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series NR-4F, NR-8F, NR-16F series NR4H, NR8H, NR16H series
  • Unscored —
    CVE-2023-38585

    Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrar…

    CBC NR4H, NR8H, NR16H series NR-4M, NR-8M, NR-16M series DR-16M, DR-8M, DR-4M51 series
  • Critical 9.8
    CVE-2023-4404

    Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation

    The Donation Forms by Charitable plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.7.0.12 due to insufficient restriction on the 'update_core_user' function. This makes it possible for unauthenticated attackers to …

    smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More Web / CMS
  • High 7.8
    CVE-2023-39986

    Out-of-bounds Read Vulnerability in Hitachi EH-VIEW (Designer)

    ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Read vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially disclose information on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that th…

    Hitachi EH-VIEW
  • High 7.8
    CVE-2023-39985

    Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (Designer)

    ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (Designer) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in that …

    Hitachi EH-VIEW
  • High 7.8
    CVE-2023-39984

    Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability in Hitachi EH-VIEW (KeypadDesigner)

    ** UNSUPPORTED WHEN ASSIGNED ** Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially disclose information and execute arbitray code on affected EH-VIEW …

    Hitachi EH-VIEW
  • High 7.8
    CVE-2023-3495

    Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)

    ** UNSUPPORTED WHEN ASSIGNED ** Out-of-bounds Write vulnerability in Hitachi EH-VIEW (KeypadDesigner) allows local attackers to potentially execute arbitray code on affected EH-VIEW installations. User interaction is required to exploit the vulnerabilities in…

    Hitachi EH-VIEW
  • High 7.8
    CVE-2023-38831 Exploited · Ransomware Public exploit EPSS 100%

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within …

    KEV Aug 24, 2023
  • Unscored —
    CVE-2023-36317

    Cross Site Scripting (XSS) vulnerability in sourcecodester Student Study Center Desk Management System 1.0 allows attac…

  • Medium 5.3
    CVE-2023-41100

    hCaptcha for EXT:form Broken Access Control vulnerability

    An issue was discovered in the hcaptcha (aka hCaptcha for EXT:form) extension before 2.1.2 for TYPO3. It fails to check that the required captcha field is submitted in the form data. allowing a remote user to bypass the CAPTCHA check.

    waldhacker/hcaptcha Packagist
  • Unscored —
    CVE-2023-41105

    An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(),…

    python3.11 python3.11 Debian Ubuntu
  • Unscored —
    CVE-2023-41098

    An issue was discovered in MISP 2.4.174. In app/Controller/DashboardsController.php, a reflected XSS issue exists via t…

  • Unscored —
    CVE-2023-41104

    libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access du…