Skip to content
OpenAdvisories

Archive

27 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /27 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 9.4
    CVE-2023-4523

    Real Time Automation 460 Series Cross-site Scripting

    Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. If this were to occur, the gateway's HTTP interface would redirec…

    Real Time Automation 460 Series
  • Critical 9.8
    CVE-2023-20252

    A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could a…

    Cisco Cisco SD-WAN vManage Network devices
  • Critical 9.9
    CVE-2023-42657 EPSS 16%

    WS_FTP Server Directory Traversal

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized W…

    Progress Software WS_FTP Server
  • Critical 10.0
    CVE-2023-40044 Exploited · Ransomware Public exploit Scanner template EPSS 90%

    WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

    Progress Software WS_FTP Server
    KEV Oct 5, 2023
  • Critical 9.8
    CVE-2023-5175

    During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed f…

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  • Critical 9.8
    CVE-2023-5172

    A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential…

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu
  • Critical 9.8
    CVE-2023-5176

    Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2023-5174

    If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointe…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine
  • Critical 9.8
    CVE-2023-5168

    A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds writ…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine
  • Critical 9.8
    CVE-2023-35071

    SQLi in MRV Tech's Logging Administration Panel

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915 .

    MRV Tech Logging Administration Panel
  • Critical 9.8
    CVE-2023-4737

    SQLi in Hedef Trackings Admin Panel

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2.

    Hedef Tracking Admin Panel