Skip to content
OpenAdvisories

Archive

1 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /1 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical —
    GHSA-h24c-6p6p-m3vx

    tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli

    ### Impact The specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus `N` containing small factors (less than `2^100`) they can…

    github.com/bnb-chain/tss-lib Go
  • Critical 10.0
    CVE-2023-1523

    Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal wh…

    Canonical snapd snapd snapd Debian Ubuntu
  • Critical 9.8
    CVE-2023-4696 Public exploit

    Improper Access Control in usememos/memos

    Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

    usememos usememos/memos github.com/usememos/memos Go
  • Critical 9.6
    CVE-2023-4695

    Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib

    Use of Predictable Algorithm in Random Number Generator in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib
  • Critical 9.8
    CVE-2023-39631

    Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library

    An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.

    langchain numexpr PyPI
  • Critical 9.8
    CVE-2023-36328

    Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, …

    samba tcl libtommath libtommath Debian Ubuntu Azure Linux Alpine