Skip to content
OpenAdvisories

Archive

4 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /4 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.8
    CVE-2023-42824 Exploited Public exploit

    The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may…

    Apple iOS and iPadOS iOS
    KEV Oct 5, 2023
  • Medium 5.9
    CVE-2023-43804 Public exploit

    `Cookie` HTTP header isn't stripped on cross-origin redirects

    urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…

    urllib3 urllib3 python3 dask-gateway Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 7.3
    CVE-2023-3971 Public exploit

    Controller: html injection in custom login info

    An HTML injection flaw was found in Controller in the user interface settings. This flaw allows an attacker to capture credentials by creating a custom login page by injecting HTML, resulting in a complete compromise.

    Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 9 Red Hat Ansible Automation Platform 2.4 for RHEL 8 Red Hat Ansible Automation Platform 2.3 for RHEL 8
  • Critical 10.0
    CVE-2023-22515 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploite…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Oct 5, 2023
  • Unscored —
    CVE-2023-35803 Public exploit

    IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

  • Unscored —
    CVE-2023-43838 Public exploit

    An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code…

  • Unscored —
    CVE-2023-43877 Public exploit

    Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via…

  • High 7.5
    CVE-2023-43261 Public exploit Scanner template EPSS 64%

    An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensit…