Skip to content
OpenAdvisories

Archive

1 October 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 6.3

    SATO CL4NX-J Plus Cookie improper authentication

    A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The manipulation with the input auth=user,level1,settings; web=true leads to improper authentication. Acce…

  • Medium 6.3

    SATO CL4NX-J Plus WebConfig improper authentication

    A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The attack needs to be d…

  • Medium 4.3
    CVE-2023-5324 Public exploit

    eeroOS Ethernet Interface denial of service

    A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local n…

  • Medium 5.5
    CVE-2023-4211 Exploited

    Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

    A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.

    KEV Oct 3, 2023
  • Medium 4.7
    CVE-2023-5322 EPSS 17%

    D-Link DAR-7000 edit_manageadmin.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/edit_manageadmin.php. The manipulation of the argument id l…

  • Medium 5.4

    Cross-site Scripting (XSS) - Generic in dolibarr/dolibarr

    Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0.