Skip to content
OpenAdvisories

Archive

13 September 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-4568 Public exploit Scanner template

    PaperCut NG Unauthenticated XMLRPC

    PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

  • Critical 10.0
    CVE-2023-41892 Public exploit Scanner template EPSS 94%

    Craft CMS Remote Code Execution vulnerability

    Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed i…

  • Medium 5.5
    CVE-2023-3280 Public exploit

    Cortex XDR Agent: Local Windows User Can Disable the Agent

    A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

  • High 7.8
    CVE-2023-26369 Exploited Public exploit

    [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

    Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

    KEV Sep 14, 2023
  • Unscored —
    CVE-2023-42469 Public exploit

    The com.full.dialer.top.secure.encrypted application through 1.0.1 for Android enables any installed application (with …

  • Unscored —
    CVE-2023-42468 Public exploit

    The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls…