Skip to content
OpenAdvisories

Archive

29 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /29 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.8
    CVE-2023-4296

    PTC Codebeamer Cross site scripting

    ​If an attacker tricks an admin user of PTC Codebeamer into clicking on a malicious link, it may allow the attacker to inject arbitrary code to be executed in the browser on the target device.

    PTC Codebeamer
  • High 7.0
    CVE-2023-4611

    Use after free race between mbind() and vma-locked page fault

    A use-after-free flaw was found in mm/mempolicy.c in the memory management subsystem in the Linux Kernel. This issue is caused by a race between mbind() and VMA-locked page fault, and may allow a local attacker to crash the system or lead to a kernel informat…

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2023-32241

    WordPress Essential Addons for Elementor Pro Plugin <= 5.4.8 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPDeveloper Essential Addons for Elementor Pro plugin <= 5.4.8 versions.

    WPDeveloper Essential Addons for Elementor Pro
  • High 7.5
    CVE-2023-4346 Exploited

    KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable…

    KNX Association KNX Protocol Connection Authorization Option 1
    KEV Jul 15, 2026
  • High 8.3
    CVE-2023-39266

    Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch

    A vulnerability in the ArubaOS-Switch web management interface could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface provided certain configuration options are present. A successfu…

    Hewlett Packard Enterprise ArubaOS-Switch
  • High 7.2
    CVE-2023-20890 EPSS 20%

    Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with admi…

  • High 8.4
    CVE-2023-23774

    Motorola EBTS/MBTS Site Controller drops to debug prompt on unhandled exception. The Motorola MBTS Site Controller expo…

    Motorola EBTS/MBTS Base Radio
  • High 7.2
    CVE-2023-23773

    Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic si…

    Motorola EBTS/MBTS Base Radio
  • High 7.2
    CVE-2023-23772

    Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryp…

    Motorola MBTS Site Controller
  • High 8.4
    CVE-2023-23771

    Motorola MBTS Base Radio accepts hard-coded backdoor password. The Motorola MBTS Base Radio Man Machine Interface (MMI)…

    Motorola MBTS Base Radio
  • High 7.5
    CVE-2023-32457

    Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. A remote atta…

    Dell PowerScale OneFS
  • High 7.5
    CVE-2023-39663

    MathJax Regular expression Denial of Service (ReDoS)

    Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to use…

    mathjax mathjax Ubuntu npm
  • High —
    CVE-2023-40787 EPSS 18%

    SpringBlade vulnerable to SQL injection

    In SpringBlade V3.6.0 when executing SQL query, the parameters submitted by the user are not wrapped in quotation marks, which leads to SQL injection.

    org.springblade:blade-core-tool Maven
  • High 8.2
    CVE-2023-41266 Exploited · Ransomware Scanner template EPSS 85%

    A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, Fe…

    KEV Dec 7, 2023