Skip to content
OpenAdvisories

Archive

21 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /21 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-41991 Exploited Public exploit EPSS 13%

    A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A ma…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 25, 2023
  • Medium 6.5
    CVE-2023-42806

    Snapshot signature not including HeadID will allow replay attacks

    Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be a participant of this head) to use a snapshot from an old head instance with the same participants t…

    input-output-hk hydra
  • Medium 6.3
    CVE-2023-42807

    Frappe LMS SQL Injection Issue on People Page

    Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest …

    Frappe Technologies lms
  • Medium 5.7
    CVE-2023-5104

    Improper Input Validation in nocodb/nocodb

    Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.

    nocodb nocodb/nocodb nocodb npm
  • Medium 5.3
    CVE-2023-4292

    Frauscher FDS101 for FAdC/FAdCi SQL injection vulnerability

    Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log inform…

    Frauscher FDS101 for FAdC/FAdCi
  • Medium 5.9
    CVE-2023-39252

    Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated at…

    Dell Secure Connect Gateway (SCG) Policy Manager
  • Medium 4.7
    CVE-2023-42482

    Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free.

  • Medium 6.1
    CVE-2018-5478

    Contao Cross-site Scripting vulnerabililty

    Contao 3.x before 3.5.32 allows XSS via the unsubscribe module in the frontend newsletter extension.

    contao/core Packagist