Skip to content
OpenAdvisories

Archive

2 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /2 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • High 7.8
    CVE-2023-4738

    Heap-based Buffer Overflow in vim/vim

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

    vim vim/vim vim vim Debian Azure Linux Alpine
  • High 7.8
    CVE-2023-4736

    Untrusted Search Path in vim/vim

    Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

    vim vim/vim vim vim Azure Linux Alpine
  • Medium 4.8
    CVE-2023-4735

    Out-of-bounds Write in vim/vim

    Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • High 7.8
    CVE-2023-4734

    Integer Overflow or Wraparound in vim/vim

    Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2023-39983

    MXsecurity Register Database Pollution

    A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1. This vulnerability might allow an unauthenticated remote attacker to register or add devices…

    Moxa MXsecurity Series ICS / OT
  • High 7.5
    CVE-2023-39982

    MXsecurity Hardcoded Credential

    A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentiality and integrity of SSH communications at risk on the affected device. This vulnerability is attributed to a hard-coded SSH host key, which …

    Moxa MXsecurity Series ICS / OT
  • High 7.5
    CVE-2023-39981

    MXsecurity Device Information Disclosure

    A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vulnerability arises from inadequate authentication measures, potentially leading to the disclosure of device information by a remote attacker.

    Moxa MXsecurity Series ICS / OT
  • High 7.1
    CVE-2023-39980

    MXsecurity Authenticated Information Disclosure Due to SQL Injection

    A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity versions prior to v1.0.1. This vulnerability arises when special elements are not neutralized correctly, allowing remote attackers to alter …

    Moxa MXsecurity Series ICS / OT
  • Critical 9.8
    CVE-2023-39979

    MXsecurity Authentication Bypass

    There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote attacker might access the system if the web service authenticator has insufficient random values.  

    Moxa MXsecurity Series ICS / OT
  • Medium 6.4
    CVE-2023-4718

    Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' shortcodes in versions up to, and including, 4.7.0 due to insufficient input sanitization and output escaping on user supplied attributes. T…

    new-nine Font Awesome 4 Menus Web / CMS