Skip to content
OpenAdvisories

Archive

24 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /24 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 6.3
    CVE-2023-5145 EPSS 34%

    D-Link DAR-7000 licence.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_u…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5144

    D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload lead…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5143

    D-Link DAR-7000 webmailattach.php Privilege Escalation

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name lea…

    D-Link DAR-7000 Network devices
  • Low 3.7
    CVE-2023-5142 Public exploit

    H3C ER6300G2 Config File userLogin.asp path traversal

    A vulnerability classified as problematic was found in H3C GR-1100-P, GR-1108-P, GR-1200W, GR-1800AX, GR-2200, GR-3200, GR-5200, GR-8300, ER2100n, ER2200G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2 and ER6300G2 up to 20230908. This vulnerability affects unknown…

    H3C GR-1800AX ER3200G2 GR-1200W
  • Medium 6.6
    CVE-2023-1633

    Insecure barbican configuration file leaking credential

    A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gaining access to sensitive credentials.

    Red Hat RDO Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 16.2 PyPI
  • Medium 6.0
    CVE-2023-1636

    Incomplete container isolation

    A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one configuration. Barbican containers share the same CGROUP, USER, and NET namespace with the host system and other OpenSt…

    Red Hat RDO Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 16.2 PyPI
  • High 7.4
    CVE-2023-1625

    Information leak in api

    An information leak was discovered in OpenStack heat. This issue could allow a remote, authenticated attacker to use the 'stack show' command to reveal parameters which are supposed to remain hidden. This has a low impact to the confidentiality, integrity, an…

    Red Hat RDO Red Hat OpenStack Platform 13 (Queens) Red Hat OpenStack Platform 16.2 Debian Ubuntu PyPI
  • High 8.0
    CVE-2023-1260

    Kube-apiserver: privesc

    An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would t…

    Red Hat Red Hat OpenShift Container Platform 4 Red Hat OpenShift Container Platform 4.14 Red Hat OpenShift Container Platform 4.13 Go