Skip to content
OpenAdvisories

Archive

6 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /6 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.9
    CVE-2023-41329

    Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studio

    WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventing proxying to and recording from specific target addresses. These restrictions can be configured us…

    wiremock wiremock org.wiremock:wiremock-standalone com.github.tomakehurst:wiremock-jre8 Maven PyPI
  • Low 3.3
    CVE-2023-41053

    Redis SORT_RO may bypass ACL configuration

    Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing this command access to keys that are not explicitly authorized by the ACL configuration. The problem e…

    Redis Redis redis redis Debian Alpine
  • Low 3.8
    CVE-2023-39265 Public exploit EPSS 86%

    Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

    Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Ad…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Low 3.5
    CVE-2023-41946

    CSRF vulnerability in Jenkins Frugal Testing Plugin

    A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal Testing using attacker-specified credentials, and to retrieve test IDs and names from Frugal Testing, if a valid credentia…

    Jenkins Project Jenkins Frugal Testing Plugin io.jenkins.plugins:frugal-testing Web / CMS Maven
  • Low 3.3
    CVE-2023-30730

    Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 1…

    Samsung Mobile Camera