Skip to content
OpenAdvisories

Archive

18 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /18 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2023-42524

    Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSe…

  • Unscored —
    CVE-2023-42520

    Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects…

  • Unscored —
    CVE-2023-42328

    An issue in PeppermintLabs Peppermint v.0.2.4 and before allows a remote attacker to obtain sensitive information and e…

  • Unscored —
    CVE-2023-42522

    Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. …

  • Unscored —
    CVE-2023-42253

    Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts via Invoice No, To, an…

  • Unscored —
    CVE-2023-42387

    An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via …

  • Unscored —
    CVE-2023-42359

    SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate …

  • Unscored —
    CVE-2023-42371

    Cross Site Scripting vulnerability in Summernote Rich Text Editor v.0.8.18 and before allows a remote attacker to execu…

  • Unscored —
    CVE-2023-42320

    Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a…

  • Unscored —
    CVE-2023-42525

    Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSe…

  • Unscored —
    CVE-2023-42526

    Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This aff…

  • Medium 5.4
    CVE-2023-37611

    Neos CMS Cross Site Scripting vulnerability

    Cross Site Scripting (XSS) vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file to the neos/management/media component.

    neos/media-browser Packagist
  • Unscored —
    CVE-2023-43115 Public exploit

    In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript …

    ghostscript ghostscript ghostscript ghostscript Debian Ubuntu Alpine Wolfi
  • Unscored —
    CVE-2023-43114

    An issue was discovered in Qt before 5.15.16, 6.x before 6.2.10, and 6.3.x through 6.5.x before 6.5.3 on Windows. When …

    qtbase-opensource-src qt6-base qtbase-opensource-src-gles qt4-x11 Ubuntu
  • Unscored —
    CVE-2021-26837 Public exploit

    SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.1…