Skip to content
OpenAdvisories

Archive

5 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /5 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

23 results · Clear filters · Feed

  • High 7.1
    CVE-2023-44211

    Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Ac…

    Acronis Acronis Cyber Protect Cloud Agent Acronis Cyber Protect 16
  • High 7.3
    CVE-2023-44212

    Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Ac…

    Acronis Acronis Agent
  • High 8.1
    CVE-2023-39323

    Arbitrary code execution during build via line directives in cmd/go

    Line directives ("//line") can be used to bypass the restrictions on "//go:cgo_" directives, allowing blocked linker and compiler flags to be passed during compilation. This can result in unexpected execution of arbitrary code when running "go build". The lin…

    Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.8
    CVE-2023-43069

    Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An au…

    Dell Dell SmartFabric Storage Software
  • High 7.8
    CVE-2023-43068

    Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted s…

    Dell Dell SmartFabric Storage Software
  • High 8.8
    CVE-2023-5346

    Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap cor…

    Google Chrome chromium Browsers Debian
  • High 7.8
    CVE-2023-4401

    Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of t…

    Dell Dell SmartFabric Storage Software
  • High 8.8
    CVE-2023-4570

    Improper Restriction in NI MeasurementLink Python Services

    An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be unreachable outside of the node. This affects measurement …

    NI MeasurementLink ni-measurementlink-service PyPI
  • High 8.8
    CVE-2023-45160

    Elevated Temp Directory Execution in 1E Client

    In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files, e.g., to substitute a harmful script. by replacing a resource script file created by an instruction at run time with a malicious script. The 1E Cli…

    1E 1E Client
  • High —
    GHSA-4c29-gfrp-g6x9

    CefSharp affected by libvpx's heap buffer overflow in vp8 encoding

    Google is aware that an exploit for CVE-2023-5217 exists in the wild. Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a …

    CefSharp.Common CefSharp.Common.NETCore NuGet
  • High 8.4
    CVE-2023-45159

    1E Client installer can perform arbitrary file deletion on protected files

    1E Client installer can perform arbitrary file deletion on protected files.   A non-privileged user could provide a symbolic link or Windows junction to point to a protected directory in the installer that the 1E Client would then clear on service startup. A …

    1E 1E Client
  • High —
    GHSA-94vc-p8w7-5p49

    Bundled libwebp in imagecodecs vulnerable

    imagecodecs versions before v2023.9.18 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). imagecodecs v2023.9.18 upgrades the bundled libwebp binary to v1.3.2.

    imagecodecs PyPI
  • High 7.5
    CVE-2023-44836

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SSID parameter in the SetWLanRadioSetti…

  • High 7.5
    CVE-2023-44835

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Mac parameter in the SetParentsControlI…

  • High 7.5
    CVE-2023-44833

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the GuardInt parameter in the SetWLanRadioS…

  • High 7.5
    CVE-2023-44830

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the EndTime parameter in the SetParentsCont…

  • High 7.5
    CVE-2023-44837

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Password parameter in the SetWanSetting…

  • High 7.5
    CVE-2023-44828

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the CurrentPassword parameter in the CheckP…

  • High 7.5
    CVE-2023-44831

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Type parameter in the SetWLanRadioSetti…

  • High 7.5
    CVE-2023-44834

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the StartTime parameter in the SetParentsCo…

  • High 7.5
    CVE-2023-44829

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the AdminPassword parameter in the SetDevic…

  • High 7.5
    CVE-2023-44832

    D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the MacAddress parameter in the SetWanSetti…

  • High 8.8
    CVE-2023-43284 Public exploit

    D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker t…