Skip to content
OpenAdvisories

Archive

28 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /28 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-4569

    Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c

    A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  • Medium 4.3
    CVE-2023-39968

    Open Redirect Vulnerability in jupyter-server

    jupyter-server is the backend for Jupyter web applications. Open Redirect Vulnerability. Maliciously crafted login links to known Jupyter Servers can cause successful login or an already logged-in session to be redirected to arbitrary sites, which should be r…

    jupyter-server jupyter_server kubeflow-pipelines-visualization-server jupyter-server Debian Ubuntu Alpine Wolfi PyPI
  • Medium 4.6
    CVE-2023-40170

    cross-site inclusion (XSSI) of files in jupyter-server

    jupyter-server is the backend for Jupyter web applications. Improper cross-site credential checks on `/files/` URLs could allow exposure of certain file contents, or accessing files when opening untrusted files via "Open image in new tab". This issue has been…

    jupyter-server jupyter_server kubeflow-pipelines-visualization-server jupyter-server Debian Ubuntu Alpine Wolfi PyPI
  • Medium 4.0
    CVE-2023-39348

    Improper log output when using GitHub Status Notifications in spinnaker

    Spinnaker is an open source, multi-cloud continuous delivery platform. Log output when updating GitHub status is improperly set to FULL always. It's recommended to apply the patch and rotate the GitHub token used for github status notifications. Given that th…

    spinnaker spinnaker github.com/spinnaker/spinnaker Go
  • Medium 5.3
    CVE-2023-24959

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.

    IBM InfoSphere Information Server
  • Medium 5.3
    CVE-2023-23473

    IBM InfoSphere Information Server cross-site request forgery

    IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 245400.

    IBM InfoSphere Information Server
  • Medium 6.5
    CVE-2023-26270

    IBM Security Guardium Data Encryption code execution

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could …

    IBM Guardium Cloud Key Manager
  • Medium 5.3
    CVE-2023-26271

    IBM Security Guardium Data Encryption information disclosure

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126.

    IBM Guardium Cloud Key Manager
  • Medium 5.3
    CVE-2023-26272

    IBM Security Guardium Data Encryption information disclosure

    IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further a…

    IBM Guardium Cloud Key Manager
  • Medium 6.5
    CVE-2023-4560

    Improper Authorization of Index Containing Sensitive Information in omeka/omeka-s

    Improper Authorization of Index Containing Sensitive Information in GitHub repository omeka/omeka-s prior to 4.0.4.

    omeka omeka/omeka-s
  • Medium 6.1
    CVE-2023-39062 Public exploit

    Spipu HTML2PDF vulnerable to cross-site scripting

    Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.

    spipu/html2pdf Packagist