Skip to content
OpenAdvisories

Archive

14 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /14 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-4972

    Information Disclosure in Digital Yepas

    Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users. This issue affects Digital Yepas: before 1.0.1.

    Yepas Digital Yepas
  • Critical 9.8
    CVE-2023-4702

    Authentication Bypass in Digital Yepas

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1.

    Yepas Digital Yepas
  • Critical 9.8
    CVE-2023-4669

    Authentication Bypass in Exagate SYSGuard 3001

    Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0.

    Exagate SYSGuard 3001
  • Critical 9.8
    CVE-2023-4766

    SQLi in Movus Admin Panel

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913.

    Movus Movus
  • Critical 9.8
    CVE-2023-4832

    SQLi in Aceka Holdings Company Management

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072 .

    Aceka Company Management
  • Critical 9.8
    CVE-2023-30909

    A remote authentication bypass issue exists in some OneView APIs.

    Hewlett Packard Enterprise (HPE) HPE OneView
  • Critical 9.8
    CVE-2023-38204 EPSS 70%

    Bypass APSB23-41 (CVE-2023-38203) - Pre-Auth RCE ColdFusion 2021 Update 8

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user in…

    Adobe ColdFusion