Skip to content
OpenAdvisories

Archive

2 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /2 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.8
    CVE-2023-36628

    Privilege Escalation in VASA

    A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation.

    Pure Storage FlashArray Purity
  • High 7.7
    CVE-2023-36627

    FlashBlade Snapshot Scheduler

    A flaw exists in FlashBlade Purity whereby a user with access to an administrative account on a FlashBlade that is configured with timezone-dependent snapshot schedules can configure a timezone to prevent the schedule from functioning properly.

    Pure Storage FlashBlade Purity
  • High 7.7
    CVE-2023-31042

    FlashBlade Object Store Protocol

    A flaw exists in FlashBlade Purity whereby an authenticated user with access to FlashBlade’s object store protocol can impact the availability of the system’s data access and replication protocols.

    Pure Storage FlashBlade Purity
  • High 8.6
    CVE-2023-3769

    Vulnerability in Ingeteam's INGEPAC EF

    Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS pr…

    Ingeteam INGEPAC FC5066
  • High 8.2
    CVE-2023-5106

    Incorrect Authorization in GitLab

    An issue has been discovered in Ultimate-licensed GitLab EE affecting all versions starting 13.12 prior to 16.2.8, 16.3.0 prior to 16.3.5, and 16.4.0 prior to 16.4.1 that could allow an attacker to impersonate users in CI pipelines through direct transfer gro…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 8.6
    CVE-2023-3768

    Vulnerability in Ingeteam's INGEPAC EF/DA

    Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS pr…

    Ingeteam INGEPAC DA3451
  • High 7.1
    CVE-2023-44245

    WordPress Contractor Contact Form Website to Workflow Tool Plugin <= 4.0.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions.

    Leap Contractor Contact Form Website to Workflow Tool
  • High 7.1
    CVE-2023-44144

    WordPress Dreamfox Media Payment gateway per Product for Woocommerce Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin <= 3.2.7 versions.

    dreamfox Payment Gateway Per Product for WooCommerce Web / CMS
  • High 7.1
    CVE-2023-44244

    WordPress FooGallery Plugin <= 2.2.44 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.44 versions.

    FooPlugins FooGallery
  • High 7.1
    CVE-2023-44474

    WordPress Tiger Forms Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin <= 2.0.0 versions.

    MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder
  • High 7.1
    CVE-2023-41856

    WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickToTweet.Com Click To Tweet plugin <= 2.0.14 versions.

    ClickToTweet.com Click To Tweet
  • High 7.1
    CVE-2023-41692

    WordPress Attorney Theme <= 3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hennessey Digital Attorney theme <= 3 theme.

    Hennessey Digital Attorney
  • High 7.5
    CVE-2023-32820

    In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote deni…

    MediaTek MT5221, MT6781, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6983, MT6985, MT7663, MT7668, MT7902, MT7921, MT816
  • High 8.8
    CVE-2023-43835

    Super Store Finder 3.7 and below is vulnerable to authenticated Arbitrary PHP Code Injection that could lead to Remote …