Skip to content
OpenAdvisories

Archive

29 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /29 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.0
    CVE-2023-26218

    TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities

    The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a low privileged attacker to social engineer a legitimate user with network access to execute scripts ta…

    TIBCO Software TIBCO Nimbus
  • High 7.5
    CVE-2023-39410

    Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

    When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11…

    Apache Software Foundation Apache Avro Java SDK druid tez Wolfi Maven PyPI
  • High 7.1
    CVE-2023-39308

    WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions.

    UserFeedback Team User Feedback
  • High 7.1
    CVE-2023-5289

    Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

    Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.

    ikus060 ikus060/rdiffweb rdiffweb PyPI
  • High 7.1
    CVE-2023-41691

    WordPress WooCommerce PensoPay Plugin <= 6.3.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pensopay WooCommerce PensoPay plugin <= 6.3.1 versions.

    Pensopay WooCommerce PensoPay Web / CMS
  • High 7.1
    CVE-2023-41663

    WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions.

    Giovambattista Fazioli WP Bannerize Pro
  • High 7.1
    CVE-2023-41662

    WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions.

    Ulf Benjaminsson WP-dTree
  • High 7.1
    CVE-2023-41658

    WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions.

    I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery
  • High 7.8
    CVE-2023-32477

    Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-…

    Dell Common Event Enabler
  • High 7.5
    CVE-2023-30591 EPSS 59%

    NodeBB Pre-Authentication Denial-of-Service

    Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, while processing Socket.IO messages via crafted Socket.IO messages containing array or object type fo…

    NodeBB NodeBB
  • High 7.8
    CVE-2023-44464

    pretix allows Pillow to parse EPS files

    pretix before 2023.7.2 allows Pillow to parse EPS files.

    pretix PyPI