Skip to content
OpenAdvisories

Archive

6 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /6 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2020-10132 Public exploit

    CVE-2020-10132

    SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10131 Public exploit

    CVE-2020-10131

    SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10130 Public exploit

    CVE-2020-10130

    SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10129 Public exploit

    CVE-2020-10129

    SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.

    SearchBlox SearchBlox
  • High 7.8
    CVE-2023-4622 Public exploit

    Use-after-free in Linux kernel's af_unix component

    A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation. The unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Medium 6.6
    CVE-2023-37941 Public exploit EPSS 35%

    Apache Superset: Metadata db write access can lead to remote code execution

    If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. The Superset metadata db is an 'internal' component that is t…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Low 3.8
    CVE-2023-39265 Public exploit EPSS 86%

    Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

    Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Ad…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Critical 9.8
    CVE-2023-4634 Public exploit Scanner template EPSS 86%

    Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

    The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_file' parameter from …

    dglingren Media Library Assistant Web / CMS
  • High 7.8
    CVE-2023-32163 Public exploit

    Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability

    Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute lo…

    Wacom Drivers for Windows Windows
  • High 7.8
    CVE-2023-32162 Public exploit

    Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the abil…

    Wacom Drivers for Windows Windows
  • Unscored —
    CVE-2023-32428 Public exploit

    This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 an…

    Apple macOS iOS and iPadOS watchOS macOS iOS