Skip to content
OpenAdvisories

Archive

September 2023

Vulnerabilities first published in this month (UTC), newest first.

← August 2023 2023 / September October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

142 results · Clear filters · Feed

  • Medium 6.6
    CVE-2023-37941 Public exploit EPSS 35%

    Apache Superset: Metadata db write access can lead to remote code execution

    If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. The Superset metadata db is an 'internal' component that is t…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Low 3.8
    CVE-2023-39265 Public exploit EPSS 86%

    Apache Superset: Possible Unauthorized Registration of SQLite Database Connections

    Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Ad…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Critical 9.8
    CVE-2023-4634 Public exploit Scanner template EPSS 86%

    Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

    The Media Library Assistant plugin for WordPress is vulnerable to Local File Inclusion and Remote Code Execution in versions up to, and including, 3.09. This is due to insufficient controls on file paths being supplied to the 'mla_stream_file' parameter from …

    dglingren Media Library Assistant Web / CMS
  • High 7.8
    CVE-2023-32163 Public exploit

    Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability

    Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute lo…

    Wacom Drivers for Windows Windows
  • High 7.8
    CVE-2023-32162 Public exploit

    Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the abil…

    Wacom Drivers for Windows Windows
  • Unscored —
    CVE-2023-32428 Public exploit

    This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 an…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • High 8.8
    CVE-2023-4762 Exploited Public exploit EPSS 41%

    Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
    KEV Feb 6, 2024
  • High 7.2
    CVE-2023-39362 Public exploit EPSS 85%

    Authenticated command injection in SNMP options of a Device

    Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining …

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2023-39361 Public exploit Scanner template EPSS 89%

    Unauthenticated SQL Injection in graph_view.php in Cacti

    Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graph_view.php. Since guest users can access graph_view.php without authentication by default, if guest users are bei…

    Cacti cacti cacti cacti Debian Ubuntu Alpine
  • Unscored —
    CVE-2020-10128 Public exploit

    SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

    SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

    SearchBlox SearchBlox
  • Medium 4.4
    CVE-2023-4636 Public exploit

    WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS
  • Low —
    CVE-2023-36308 Public exploit

    Crash when processing crafted TIFF files

    disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to the scan function of scanner.go. NOTE: it is unclear whether there are common use cases in which this …

    filebrowser golang-github-disintegration-imaging github.com/disintegration/imaging Debian Wolfi Go
  • Unscored —
    CVE-2023-41508 Public exploit

    A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

  • Unscored —
    CVE-2023-41507 Public exploit

    Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component…

  • High 7.5
    CVE-2023-4279 Public exploit

    User Activity Log < 1.6.7 - IP Spoofing

    This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.

    Web / CMS
  • Medium 6.3
    CVE-2023-4741 Public exploit

    IBOS OA Delete Logs del sql injection

    A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated rem…

    IBOS OA
  • Medium 6.3
    CVE-2023-4708 Public exploit EPSS 31%

    Infosoftbd Clcknshop GET Parameter all sql injection

    A vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection.…

    Infosoftbd Clcknshop
  • High 7.5
    CVE-2023-4698 Public exploit

    Improper Input Validation in usememos/memos

    Improper Input Validation in GitHub repository usememos/memos prior to 0.13.2.

    usememos usememos/memos github.com/usememos/memos Go
  • Critical 9.8
    CVE-2023-4696 Public exploit

    Improper Access Control in usememos/memos

    Improper Access Control in GitHub repository usememos/memos prior to 0.13.2.

    usememos usememos/memos github.com/usememos/memos Go
  • Unscored —
    CVE-2023-39710 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows att…

  • Unscored —
    CVE-2023-39714 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows att…

  • Unscored —
    CVE-2023-36076 Public exploit

    SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and …