Skip to content
OpenAdvisories

Archive

3 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /3 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

64 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-25989

    Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

    Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Me…

    Meks Meks Easy Ads Widget Meks Smart Social Widget Meks Smart Author Widget
  • Medium 6.7
    CVE-2023-0828

    Stored Cross Site Scripting in syslog section

    Cross-site Scripting (XSS) vulnerability in Syslog Section of Pandora FMS allows attacker to cause that users cookie value will be transferred to the attackers users server. This issue affects Pandora FMS v767 version and prior versions on all platforms.

    Artica PFMS Pandora FMS
  • Medium 6.7
    CVE-2023-24518

    Disabling the administrator's account through cross-site request forgery

    A Cross-site Request Forgery (CSRF) vulnerability in Pandora FMS allows an attacker to force authenticated users to send a request to a web application they are currently authenticated against. This issue affects Pandora FMS version 767 and earlier versions o…

    Artica PFMS Pandora FMS
  • Medium 5.4
    CVE-2023-25463

    WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Gopi Ramasamy WP tell a friend popup form plugin <= 7.1 versions.

    Gopi Ramasamy WP tell a friend popup form
  • Medium 4.3
    CVE-2023-38390

    WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Anshul Labs Mobile Address Bar Changer plugin <= 3.0 versions.

    Anshul Labs Mobile Address Bar Changer
  • Medium 5.4
    CVE-2023-38396

    WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.

    Alain Gonzalez google-map-shortcode
  • Medium 4.3
    CVE-2023-37990

    WordPress Perelink Pro Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Mike Perelink Pro plugin <= 2.1.4 versions.

    Mike Perelink Pro
  • Medium 4.3
    CVE-2023-38398

    WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Taboola plugin <= 2.0.1 versions.

    Taboola Taboola
  • Medium 5.4
    CVE-2022-46841

    WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.

    Soflyy Oxygen Builder
  • Medium 5.4
    CVE-2023-38381

    WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Cyle Conoly WP-FlyBox plugin <= 6.46 versions.

    Cyle Conoly WP-FlyBox
  • Medium 4.3
    CVE-2023-37998

    WordPress Disabler Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Saas Disabler allows Cross Site Request Forgery.This issue affects Disabler: from n/a through 3.0.3.

    Saas Disabler
  • Medium 5.4
    CVE-2023-37996

    WordPress GTmetrix for WordPress Plugin <= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions.

    GTmetrix GTmetrix for WordPress Web / CMS
  • Medium 5.4
    CVE-2023-37992

    WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions.

    PressPage Entertainment Smarty for WordPress Web / CMS
  • Medium 4.3
    CVE-2023-37991

    WordPress WP Emoji One Plugin <= 0.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Monchito.Net WP Emoji One plugin <= 0.6.0 versions.

    Monchito.net WP Emoji One
  • Medium 4.3
    CVE-2023-37891

    WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.0.4 versions.

    OptiMonk OptiMonk: Popups, Personalization & A/B Testing
  • Medium 6.1
    CVE-2023-28571

    Buffer Over-read in WLAN HOST

    Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

    Qualcomm Snapdragon
  • Medium 6.6
    CVE-2023-28539

    Buffer Copy Without Checking Size of Input in WLAN Host

    Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.

    Qualcomm Snapdragon
  • Medium 6.7
    CVE-2023-22384

    Buffer Copy Without Checking Size of Input in VR Service

    Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).

    Qualcomm Snapdragon
  • Medium 6.5
    CVE-2023-26150

    asyncua Improper Authentication vulnerability

    Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for services that require an act…

    asyncua python-opcua Ubuntu PyPI
  • Medium 5.3
    CVE-2023-26151

    asyncua vulnerable to denial of service via infinite loop

    Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.

    asyncua python-opcua Ubuntu PyPI
  • Medium 6.4
    CVE-2023-5334

    WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WP Responsive header image slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'sp_responsiveslider' shortcode in versions up to, and including, 3.2.1 due to insufficient input sanitization and output escaping on user supplied att…

    wponlinesupport WP Responsive header image slider Web / CMS
  • Medium 5.3
    CVE-2023-3967

    DoS Vulnerability in Hitachi Ops Center Common Services

    Allocation of Resources Without Limits or Throttling vulnerability in Hitachi Ops Center Common Services on Linux allows DoS.This issue affects Hitachi Ops Center Common Services: before 10.9.3-00.

    Hitachi Hitachi Ops Center Common Services
  • Medium 6.5
    CVE-2023-3335

    Information Exposure Vulnerability in Hitachi Ops Center Administrator

    Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users  to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00.

    Hitachi Hitachi Ops Center Administrator
  • Medium 5.5
    CVE-2023-43898

    Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vuln…

    libstb libstb stb Debian Ubuntu Alpine