Skip to content
OpenAdvisories

Archive

12 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /12 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-41331

    SOFARPC Remote Command Execution (RCE) Vulnerability

    SOFARPC is a Java RPC framework. Versions prior to 5.11.0 are vulnerable to remote command execution. Through a carefully crafted payload, an attacker can achieve JNDI injection or system command execution. In the default configuration of the SOFARPC framewor…

    sofastack sofa-rpc
  • Critical 9.9
    CVE-2023-3710 Public exploit Scanner template EPSS 49%

    Printer web page invalid command execution

    Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to…

    Honeywell PM45 PM23/43 PM42 ICS / OT
  • Critical 9.8
    CVE-2023-4501

    Authentication bypass in OpenText (Micro Focus) Enterprise Server

    User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versions 7.0 patch updates…

    OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server
  • Critical 9.8
    CVE-2023-2071 EPSS 17%

    FactoryTalk View Machine Edition Vulnerable to Remote Code Execution

    Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve remote code executed via crafted malicious packets.  The device has the functionality, through a CIP…

    Rockwell Automation Fa ICS / OT
  • Critical 9.1
    CVE-2022-24093

    Adobe Commerce post-auth improper input validation leads to remote code execution

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code executi…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
  • Critical 9.8
    CVE-2023-40309

    Missing Authorization check in SAP CommonCryptoLib

    SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired…

    SAP SAP Web Dispatcher SAP Host Agent SAP HANA database
  • Critical 9.9
    CVE-2023-40622

    Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)

    SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can c…

    SAP SAP BusinessObjects Business Intelligence Platform (Promotion Management)
  • Critical 9.8
    CVE-2023-40784

    DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php.