Skip to content
OpenAdvisories

Archive

21 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /21 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-42810

    systeminformation SSID Command Injection Vulnerability

    systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed with a parameter check in version 5.21.7. As a workaround, check or sanitize parameter strings that…

    sebhildebrandt systeminformation systeminformation npm
  • Critical —
    GHSA-j646-gj5p-p45g

    CefSharp affected by heap buffer overflow in WebP

    **Google is aware that an exploit for [CVE-2023-4863](https://www.cve.org/CVERecord?id=CVE-2023-4863) exists in the wild.** ### Description Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bo…

    CefSharp.Common CefSharp.Common.NETCore NuGet
  • Critical 9.0
    CVE-2023-43632

    Freely Allocate Buffer on The Stack With Data From Socket

    As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the clients. VTPM allows clients to execute tpm2-tools binaries from a list of hardcoded options” The commun…

    LF-Edge, Zededa EVE OS github.com/lf-edge/eve Go
  • Critical 9.8
    CVE-2023-4291

    Frauscher FDS101 for FAdC/FAdCi remote code execution vulnerability

    Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface without authentication. This could lead to a full compromise of …

    Frauscher FDS101 for FAdC/FAdCi
  • Critical 9.8
    CVE-2015-5467

    Yii2 allows attackers to execute any local .php file via a relative path in the view parameter

    web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter.

    yiisoft/yii2 Packagist
  • Critical 9.8
    CVE-2023-34576

    SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitr…

  • Critical 9.8
    CVE-2023-34577

    SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary…

  • Critical 9.8
    CVE-2023-31719 Public exploit Scanner template EPSS 44%

    FUXA SQL Injection vulnerability

    FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

    fuxa-server npm