Skip to content
OpenAdvisories

Archive

August 2023

Vulnerabilities first published in this month (UTC), newest first.

14 results · Clear filters · Feed

  • High 7.5
    CVE-2023-4346 Exploited

    KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable…

    KEV Jul 15, 2026
  • Critical 9.6
    CVE-2023-41265 Exploited · Ransomware Public exploit Scanner template EPSS 88%

    An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and ea…

    KEV Dec 7, 2023
  • High 8.2
    CVE-2023-41266 Exploited · Ransomware Scanner template EPSS 85%

    A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, Fe…

    KEV Dec 7, 2023
  • High 7.8
    CVE-2023-38831 Exploited · Ransomware Public exploit EPSS 100%

    RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within …

    KEV Aug 24, 2023
  • Critical 9.8
    CVE-2023-38035 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an…

    KEV Aug 22, 2023
  • Medium 5.3
    CVE-2023-36846 Exploited Public exploit EPSS 93%

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

    KEV Nov 13, 2023
  • Critical 9.8
    CVE-2023-36845 Exploited Public exploit Scanner template EPSS 95%

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …

    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36847 Exploited EPSS 83%

    Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php tha…

    KEV Nov 13, 2023
  • Critical 10.0
    CVE-2023-35082 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted f…

    KEV Jan 18, 2024
  • High 8.8
    CVE-2022-48503 Exploited

    The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS…

    KEV Oct 20, 2025
  • High 7.5
    CVE-2023-38180 Exploited EPSS 14%

    .NET and Visual Studio Denial of Service Vulnerability

    .NET and Visual Studio Denial of Service Vulnerability

    KEV Aug 9, 2023
  • High 7.2
    CVE-2023-35081 Exploited EPSS 64%

    A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) a…

    KEV Jul 31, 2023
  • High 7.5
    CVE-2023-38950 Exploited Scanner template EPSS 92%

    A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbi…

    KEV May 19, 2025