Skip to content
OpenAdvisories

Archive

31 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /31 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-41750

    Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linu…

    Acronis Acronis Agent
  • Low 3.7
    CVE-2023-41045

    Insecure source port usage for DNS queries in Graylog

    Graylog is a free and open log management platform. Graylog makes use of only one single source port for DNS queries. Graylog binds a single socket for outgoing DNS queries and while that socket is bound to a random port number it is never changed again. This…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 3.3
    CVE-2023-41044 Public exploit

    Partial path traversal vulnerability in Support Bundle feature of Graylog

    Graylog is a free and open log management platform. A partial path traversal vulnerability exists in Graylog's `Support Bundle` feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Graylog's Support Bundle feature a…

    Graylog2 graylog2-server org.graylog2:graylog2-server Maven
  • Low 2.9
    CVE-2023-33833

    IBM Security Verify Information Queue information disclosure

    IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID: 256013.

    IBM Security Verify Information Queue
  • Low 2.6
    CVE-2023-4654

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2

    Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository instantsoft/icms2 prior to 2.16.1.

    instantsoft instantsoft/icms2