Skip to content
OpenAdvisories

Archive

September 2023

Vulnerabilities first published in this month (UTC), newest first.

← August 2023 2023 / September October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-38873 Public exploit

    Economizzer vulnerable to Clickjacking

    The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or…

    gugoan/economizzer Packagist
  • Medium 4.8
    CVE-2023-43879 Public exploit

    Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a craft…

  • Medium 5.4
    CVE-2023-43874 Public exploit

    Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code…

  • Medium 6.3
    CVE-2023-5222 Public exploit Scanner template EPSS 80%

    Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password

    A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation leads to use of hard-co…

    Viessmann Vitogate 300
  • Medium 5.3
    CVE-2023-4631 Public exploit

    DoLogin Security < 3.7 - IP Spoofing

    The DoLogin Security WordPress plugin before 3.7 uses headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing.

    Web / CMS
  • Medium 5.3
    CVE-2023-4281 Public exploit

    Activity Log < 2.8.8 - IP Spoofing

    This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.

    Web / CMS
  • Medium 6.1
    CVE-2023-42426 Public exploit

    Cross-site scripting (XSS) vulnerability in Froala Froala Editor v.4.1.1 allows remote attackers to execute arbitrary c…

  • Medium 6.1
    CVE-2023-43770 Exploited Public exploit EPSS 64%

    Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

    roundcube roundcube Debian Ubuntu
    KEV Feb 12, 2024
  • Medium 5.5
    CVE-2023-41991 Exploited Public exploit EPSS 13%

    A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A ma…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Sep 25, 2023
  • Medium 4.3
    CVE-2023-43494 Public exploit

    Jenkins does not exclude sensitive build variables from search

    Jenkins 2.50 through 2.423 (both inclusive), LTS 2.60.1 through 2.414.1 (both inclusive) does not exclude sensitive build variables (e.g., password parameter values) from the search in the build history widget, allowing attackers with Item/Read permission to …

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.3
    CVE-2023-26144 Public exploit

    graphql Uncontrolled Resource Consumption vulnerability

    Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade sys…

    node-graphql graphql node-graphql Debian Ubuntu npm
  • Medium 4.2
    CVE-2023-31014 Public exploit

    NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application o…

    NVIDIA GeForce NOW for Android mobile and TV app Android
  • Medium 5.3
    CVE-2023-40167 Public exploit

    Jetty accepts "+" prefixed value in Content-Length

    Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and othe…

    eclipse jetty.project jetty9 jetty9 Debian Ubuntu Maven Wolfi
  • Medium 6.5
    CVE-2023-4568 Public exploit Scanner template

    PaperCut NG Unauthenticated XMLRPC

    PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

    PaperCut PaperCut NG
  • Medium 5.5
    CVE-2023-3280 Public exploit

    Cortex XDR Agent: Local Windows User Can Disable the Agent

    A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.

    Palo Alto Networks Cortex XDR Agent Network devices
  • Medium 5.9
    CVE-2023-4813 Public exploit

    Glibc: potential use-after-free in gaih_inet()

    A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2023-4294 Public exploit

    URL Shortify < 1.7.6 - Unauthenticated Stored XSS via referer header

    The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short…

    Web / CMS
  • Medium 6.1
    CVE-2023-41564 Public exploit

    Cockpit CMS arbitrary file upload vulnerability

    An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .shtml file.

    cockpit-hq/cockpit Packagist
  • Medium 6.6
    CVE-2023-37941 Public exploit EPSS 35%

    Apache Superset: Metadata db write access can lead to remote code execution

    If an attacker gains write access to the Apache Superset metadata database, they could persist a specifically crafted Python object that may lead to remote code execution on Superset's web backend. The Superset metadata db is an 'internal' component that is t…

    Apache Software Foundation Apache Superset apache-superset PyPI
  • Medium 4.4
    CVE-2023-4636 Public exploit

    WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    deepakkite File Sharing & Download Manager – User Private Files Web / CMS
  • Medium 6.3
    CVE-2023-4741 Public exploit

    IBOS OA Delete Logs del sql injection

    A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=diary/default/del of the component Delete Logs Handler. The manipulation leads to sql injection. The attack can be initiated rem…

    IBOS OA
  • Medium 6.3
    CVE-2023-4708 Public exploit EPSS 31%

    Infosoftbd Clcknshop GET Parameter all sql injection

    A vulnerability was found in Infosoftbd Clcknshop 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /collection/all of the component GET Parameter Handler. The manipulation of the argument tag leads to sql injection.…

    Infosoftbd Clcknshop