Skip to content
OpenAdvisories

Archive

15 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /15 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-41900

    Jetty's OpenId Revoked authentication allows one request

    Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginService` decides to revok…

    Eclipse Foundation jetty.project jetty9 jetty9 Debian Ubuntu Wolfi Maven
  • Low 2.2
    CVE-2023-41880

    Miscompilation of wasm `i64x2.shr_s` instruction with constant input on x86_64

    Wasmtime is a standalone runtime for WebAssembly. Wasmtime versions from 10.0.0 to versions 10.02, 11.0.2, and 12.0.1 contain a miscompilation of the WebAssembly `i64x2.shr_s` instruction on x86_64 platforms when the shift amount is a constant value that is l…

    bytecodealliance wasmtime wasmtime rust-wasmtime Debian crates.io
  • Low 3.5
    CVE-2023-36479

    Jetty vulnerable to errant command quoting in CGI Servlet

    Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for…

    Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven
  • Low 2.5
    CVE-2023-4986

    Supcon InPlant SCADA Project.xml unknown vulnerability

    A vulnerability classified as problematic was found in Supcon InPlant SCADA up to 20230901. Affected by this vulnerability is an unknown functionality of the file Project.xml. The manipulation leads to password hash with insufficient computational effort. Loc…

    Supcon InPlant SCADA
  • Low 3.5
    CVE-2023-4973 Scanner template

    Academy LMS GET Parameter filter cross site scripting

    A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument…

    Academy LMS