Skip to content
OpenAdvisories

Archive

24 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /24 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 2.6
    GHSA-37xq-q42p-rv3p

    ntpd has Dependency on Vulnerable Third-Party Component

    During startup, an attacker that can man-in-the-middle traffic to and from NTS key exchange servers can trigger a very expensive key validation process due to a vulnerability in webpki. ### Impact This vulnerability can lead to excessive cpu usage on startup …

    ntpd crates.io
  • Low 3.1
    CVE-2023-34973

    QTS, QuTS hero

    An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions…

    QNAP Systems QTS QuTS hero
  • Low 3.5
    CVE-2023-34972

    QTS, QuTS hero and QuTScloud

    A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors…

    QNAP Systems QTS QuTS hero
  • Low —
    GHSA-q4pp-j36h-3gqg

    Minimal `basti` IAM Policy Allows Shell Access

    ### Summary The provided Minimal IAM Policy for `bastic connect` does not include `ssm:SessionDocumentAccessCheck`. This results in the ability to get a shell session on the bastion, not just the intended access for Port Forwarding. ### Details `basti connect…

    basti-cdk npm
  • Low 3.1
    CVE-2023-4228

    ioLogik 4000 Series: Session Cookies Attribute Not Set Properly

    A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, where the session cookies attribute is not set properly in the affected application. The vulnerability may lead to security risks, potentially exposin…

    Moxa ioLogik 4000 Series ICS / OT