Archive

25 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /25 October 2023 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.5

CVE-2022-4244 Public exploit

Codehaus-plexus: directory traversal

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by u…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Maven

Sep 25, 2023
High 8.1

CVE-2022-4137 Public exploit

Keycloak: reflected xss attack

A reflected cross-site scripting (XSS) vulnerability was found in the 'oob' OAuth endpoint due to incorrect null-byte handling. This issue allows a malicious link to insert an arbitrary URI into a Keycloak error page. This flaw requires a user or administrato…

Red Hat Red Hat Single Sign-On 7 Red Hat Single Sign-On 7.6 for RHEL 7 Red Hat Single Sign-On 7.6 for RHEL 9 Maven

Sep 25, 2023
High 7.2

CVE-2023-4300 Public exploit

Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

Web / CMS

Sep 25, 2023