Skip to content
OpenAdvisories

Archive

26 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /26 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.9
    CVE-2023-42819 Public exploit

    Path traversal in Jumpserver

    JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the 'Job-Template' menu and create a playbook named 'test'. Get the playbook id from the detail page, like 'e0adabef-c38f-4…

    jumpserver jumpserver
  • High 7.0
    CVE-2023-42820 Public exploit

    Random seed leakage in Jumpserver

    JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are…

    jumpserver jumpserver
  • Unscored —
    CVE-2023-40429 Public exploit

    A permissions issue was addressed with improved validation. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watch…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Unscored —
    CVE-2023-40448 Public exploit

    The issue was addressed with improved handling of protocols. This issue is fixed in tvOS 17, iOS 16.7 and iPadOS 16.7, …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 8.6
    CVE-2023-43646 Public exploit

    Inefficient Regular Expression Complexity in get-func-name

    get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regular expression denial of service (redos) vulnerability which may lead to a denial of service when pa…

    chaijs get-func-name qt6-webengine node-get-func-name Debian Ubuntu npm
  • Unscored —
    CVE-2023-35793 Public exploit

    An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vul…

  • Unscored —
    CVE-2023-43154 Public exploit

    In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during …

  • Unscored —
    CVE-2023-43263 Public exploit

    A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the …