Skip to content
OpenAdvisories

Archive

September 2023

Vulnerabilities first published in this month (UTC), newest first.

← August 2023 2023 / September October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

700 results · Clear filters · Feed

  • Medium 5.9
    CVE-2023-4722

    Integer Overflow or Wraparound in gpac/gpac

    Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 4.0
    CVE-2023-4720

    Floating Point Comparison with Incorrect Operator in gpac/gpac

    Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Medium 5.3
    CVE-2023-23763

    Information disclosure in GitHub Enterprise Server leading to private repository leakage

    An authorization/sensitive information disclosure vulnerability was identified in GitHub Enterprise Server that allowed a fork to retain read access to an upstream repository after its visibility was changed to private. This vulnerability affected all version…

    GitHub Enterprise Server
  • Medium 5.4
    CVE-2022-22305

    An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnaly…

    Fortinet FortiManager FortiAnalyzer FortiSandbox Network devices
  • Medium 6.5
    CVE-2023-37994

    WordPress Art Decoration Shortcode Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Artem Abramovich Art Decoration Shortcode plugin <= 1.5.6 versions.

    Artem Abramovich Art Decoration Shortcode
  • Medium 5.9
    CVE-2023-37986

    WordPress YourMembership Single Sign On Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in miniOrange YourMembership Single Sign On – YM SSO Login plugin <= 1.1.3 versions.

    miniOrange YourMembership Single Sign On – YM SSO Login
  • Medium 5.9
    CVE-2023-25488

    WordPress WP Default Feature Image Plugin <= 1.0.1.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Duc Bui Quang WP Default Feature Image plugin <= 1.0.1.1 versions.

    Duc Bui Quang WP Default Feature Image
  • Medium 5.9
    CVE-2023-25044

    WordPress Social Share Boost Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sumo Social Share Boost plugin <= 4.4 versions.

    Sumo Social Share Boost
  • Medium 5.9
    CVE-2023-25042

    WordPress oAuth Twitter Feed for Developers Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Developers plugin <= 2.3.0 versions.

    Liam Gladdy (Storm Consultancy) oAuth Twitter Feed for Developers
  • Medium 5.9
    CVE-2023-24412

    WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Image Social Feed plugin <= 1.7.6 versions.

    Web-Settler Image Social Feed
  • Medium 5.9
    CVE-2023-25477

    WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yotuwp Video Gallery plugin <= 1.3.12 versions.

    yotuwp Video Gallery
  • Medium 6.5
    CVE-2023-3210

    Inefficient Regular Expression Complexity in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importi…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2023-3950

    Cleartext Storage of Sensitive Information in GitLab

    An information disclosure issue in GitLab EE affecting all versions from 16.2 prior to 16.2.5, and 16.3 prior to 16.3.1 allowed other Group Owners to see the Public Key for a Google Cloud Logging audit event streaming destination, if configured. Owners can no…

    GitLab GitLab Web / CMS
  • Medium 4.3
    CVE-2023-4018

    Direct Request ('Forced Browsing') in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. Due to improper permission validation it was possible to create model experiments in public projects.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.5
    CVE-2023-4378

    Insertion of Sensitive Information Into Sent Data in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. A malicious Maintainer can, under specific circumstances, leak …

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2023-4647

    Allocation of Resources Without Limits or Throttling in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which the projects API pagination can be skipped, potentially leadi…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.0
    CVE-2022-4343

    Exposure of Sensitive Information to an Unauthorized Actor in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1 in which a project member can leak credentials stored in site prof…

    GitLab GitLab Web / CMS
  • Medium 6.5
    CVE-2023-3205

    Inefficient Regular Expression Complexity in GitLab

    An issue has been discovered in GitLab affecting all versions starting from 15.11 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. An authenticated user could trigger a denial of service when importi…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.5
    CVE-2023-3915

    Incorrect Execution-Assigned Permissions in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. If an external user is given an owner role on any group, that exte…

    GitLab GitLab Web / CMS
  • Medium 5.4
    CVE-2022-44349

    NAVBLUE S.A.S N-Ops & Crew 22.5-rc.50 is vulnerable to Cross Site Scripting (XSS).