Skip to content
OpenAdvisories

Archive

25 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /25 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-43644

    Improper authentication in the SOCKS5 inbound in sing-box

    Sing-box is an open source proxy system. Affected versions are subject to an authentication bypass when specially crafted requests are sent to sing-box. This affects all SOCKS5 inbounds with user authentication and an attacker may be able to bypass authentica…

    SagerNet sing-box github.com/sagernet/sing github.com/sagernet/sing-box Go
  • Critical 9.8
    CVE-2023-4521 Scanner template EPSS 41%

    Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

    The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously reported issue (https://wp…

    Web / CMS
  • Critical 9.8
    CVE-2023-4490 Scanner template

    WP Job Portal < 2.0.6 - Unauthenticated SQLi

    The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

    Web / CMS
  • Critical 9.8
    CVE-2023-35002

    A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1. A speciall…

    Accusoft ImageGear
  • Critical 9.8
    CVE-2023-39453

    A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1. A specially cr…

    Accusoft ImageGear
  • Critical 9.8
    CVE-2023-32653

    An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A sp…

    Accusoft ImageGear
  • Critical 9.8
    CVE-2023-40163

    An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGea…

    Accusoft ImageGear
  • Critical 9.8
    CVE-2023-39640

    UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHo…

  • Critical 9.8
    CVE-2023-41419

    Gevent allows remote attacker to escalate privileges

    An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.

    kubeflow-jupyter-web-app kubeflow-volumes-web-app python-gevent gevent Debian Ubuntu Azure Linux Wolfi PyPI
  • Critical 9.8
    CVE-2023-43131

    General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.