Skip to content
OpenAdvisories

Archive

2 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /2 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.9
    GHSA-4mqg-h5jf-j9m7

    TorchServe Pre-Auth Remote Code Execution

    ## Impact **Use of Open Source Library potentially exposed to RCE** **Issue**: Use of a version of the SnakeYAML `v1.31 `open source library with multiple issues that potentially exposes the user to unsafe deserialization of Java objects. This could allow thi…

    torchserve PyPI
  • Critical 9.8
    CVE-2023-4659

    Cross-Site Request Forgery in Free5Gc

    Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests …

    free5gc Open5Gc
  • Critical 9.9
    CVE-2023-3744

    Server-Side Request Forgery in SLiMS

    Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.

    SLIMS SLiMS
  • Critical 9.8
    CVE-2023-44011

    An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.…

  • Critical 9.8
    CVE-2023-43892

    Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within th…