Skip to content
OpenAdvisories

Archive

29 August 2023

Vulnerabilities first published on this day (UTC), newest first.

52 results · Feed

  • Critical 9.8

    A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted Q…

  • Unscored —

    In Cerebrate 1.14, a vulnerability in UserSettingsController allows authenticated users to change user settings of othe…

  • Unscored —

    Nokia Service Router Operating System (SR OS) 22.10 and SR Linux, when error-handling update-fault-tolerance is not ena…

  • Critical 9.6
    CVE-2023-41265 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and ea…

    KEV Dec 7, 2023
  • Critical 9.1

    An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in …

  • High 8.2
    CVE-2023-41266 Exploited · Ransomware Scanner template EPSS 85%

    A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, Fe…

    KEV Dec 7, 2023
  • Unscored —

    An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv soft…

  • Unscored —

    An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero.

  • Unscored —
    CVE-2023-41362 Public exploit

    MyBB before 1.8.36 allows Code Injection by users with certain high privileges. Templates in Admin CP intentionally use…

  • Unscored —

    An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp…

  • Unscored —

    A Stored Cross-Site Scripting (XSS) vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers…

  • Unscored —
    CVE-2021-3262 Public exploit

    TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs…