Skip to content
OpenAdvisories

Archive

8 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /8 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2023-30995

    IBM Aspera Faspex improper access control

    IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.

    IBM Aspera Faspex
  • High 8.7
    CVE-2022-33164

    IBM Security Directory Server path traversal

    IBM Security Directory Server 7.2.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view or write to arbitrary files on the system. IBM X-Forc…

    IBM Security Directory Integrator
  • High 7.5
    CVE-2023-38736

    IBM QRadar WinCollect Agent privilege escalation

    IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a normal user could utilize to gain SYSTEM permissions. IBM X-Force ID: 262542.

    IBM QRadar WinCollect Agent
  • High 7.8
    CVE-2023-4807

    POLY1305 MAC implementation corrupts XMM registers on Windows

    Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86_64 processors supporting the AVX512-IFMA instructions. Impac…

    OpenSSL OpenSSL kata-containers openssl-fips-provider Azure Linux
  • High 7.5
    CVE-2023-39584 EPSS 35%

    Hexo `include_code` has a path traversal

    Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability.

    hexo npm
  • High 7.5
    CVE-2023-41578

    Jeecg boot arbitrary file read vulnerability

    Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.

    org.jeecgframework.boot:jeecg-boot-parent Maven
  • High 7.5
    CVE-2023-42278

    hutool Buffer Overflow vulnerability

    hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

    cn.hutool:hutool-core cn.hutool:hutool-json Maven