Skip to content
OpenAdvisories

Archive

26 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /26 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.7
    CVE-2023-41335

    Temporary storage of plaintext passwords during password changes in matrix synapse

    Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. When users update their passwords, the new credentials may be briefly held in the server database. While this doesn't grant the server any added capabilities—it a…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • Low 3.1
    CVE-2023-42453

    Improper validation of receipts allows forged read receipts in matrix synapse

    Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they knew the room ID and event ID). Note that the users were not able to view the events, but simply mar…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • Low 3.5
    CVE-2023-41332

    Denial of service via Kubernetes annotations in specific Cilium configurations

    Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In Cilium clusters where Cilium's Layer 7 proxy has been disabled, creating workloads with `policy.cilium.io/proxy-visibility` annotations (in Cilium >= v1.13) or `io.c…

    cilium cilium github.com/cilium/cilium Go
  • Low 2.2
    CVE-2023-4506

    Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback

    The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated at…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • Low 2.2
    CVE-2023-4505

    Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback

    The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenti…

    cyberlord92 Staff/Employee Business Directory for Active Directory Web / CMS