Skip to content
OpenAdvisories

Archive

11 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /11 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2023-35687 Public exploit

    In MtpPropertyValue of MtpProperty.h, there is a possible memory corruption due to a use after free. This could lead to…

    Google Android Android
  • High 8.8
    CVE-2023-35674 Exploited Public exploit

    In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

    Google Android Android
    KEV Sep 13, 2023
  • Unscored —
    CVE-2023-35671 Public exploit

    In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read t…

    Google Android Android
  • Medium 6.1
    CVE-2023-4294 Public exploit

    URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header

    The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short…

    Web / CMS
  • High 7.5
    CVE-2023-4278 Public exploit

    MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.

    Web / CMS
  • Unscored —
    CVE-2020-24088 Public exploit

    An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to esca…

  • High 7.8
    CVE-2023-39063 Public exploit

    Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server n…

  • High 8.8
    CVE-2023-39780 Exploited Public exploit EPSS 40%

    On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

    ASUS RT-AX55
    KEV Jun 2, 2025
  • Unscored —
    CVE-2023-38829 Public exploit

    An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and trace…

  • High 7.2
    CVE-2023-38743 Public exploit EPSS 11%

    Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.

  • High 7.8
    CVE-2023-31468 Public exploit

    An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\…

  • Unscored —
    CVE-2023-31067 Public exploit

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on s…

  • Unscored —
    CVE-2023-31068 Public exploit

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on s…

  • Unscored —
    CVE-2023-31069 Public exploit

    An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML …

  • Unscored —
    CVE-2023-27470 Public exploit

    BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a p…

  • Unscored —
    CVE-2023-41593 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow…

  • Unscored —
    CVE-2023-42470 Public exploit

    The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a craf…

  • Unscored —
    CVE-2023-42471 Public exploit

    The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript cod…