Skip to content
OpenAdvisories

Archive

September 2023

Vulnerabilities first published in this month (UTC), newest first.

← August 2023 2023 / September October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.8
    CVE-2023-5217 Exploited Public exploit EPSS 49%

    Electron affected by libvpx's heap buffer overflow in vp8 encoding

    Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

    Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
    KEV Oct 2, 2023
  • Critical 10.0
    CVE-2023-40044 Exploited · Ransomware Public exploit Scanner template EPSS 90%

    WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

    Progress Software WS_FTP Server
    KEV Oct 5, 2023
  • Medium 6.1
    CVE-2023-43770 Exploited Public exploit EPSS 64%

    Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

    roundcube roundcube Debian Ubuntu
    KEV Feb 12, 2024
  • High 8.8
    CVE-2023-41993 Exploited Public exploit EPSS 24%

    The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

    Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
    KEV Sep 25, 2023
  • High 7.8
    CVE-2023-41992 Exploited Public exploit EPSS 12%

    The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 25, 2023
  • Medium 5.5
    CVE-2023-41991 Exploited Public exploit EPSS 13%

    A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A ma…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 25, 2023
  • Critical 9.8
    CVE-2023-42793 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

    JetBrains TeamCity
    KEV Oct 4, 2023
  • High 7.8
    CVE-2023-36802 Exploited Public exploit EPSS 28%

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Sep 12, 2023
  • High 8.8
    CVE-2023-4863 Exploited Public exploit EPSS 100%

    libwebp: OOB write in BuildHuffmanTable

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

    Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine npm PyPI Go crates.io NuGet Wolfi
    KEV Sep 13, 2023
  • High 8.8
    CVE-2023-35674 Exploited Public exploit

    In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

    Google Android Android
    KEV Sep 13, 2023
  • High 8.8
    CVE-2023-39780 Exploited Public exploit EPSS 40%

    On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

    ASUS RT-AX55
    KEV Jun 2, 2025
  • High 7.8
    CVE-2023-41064 Exploited Public exploit EPSS 53%

    A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 11, 2023
  • High 8.8
    CVE-2023-4762 Exploited Public exploit EPSS 41%

    Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

    Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
    KEV Feb 6, 2024