Skip to content
OpenAdvisories

Archive

6 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /6 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-38703

    PJSIP has use-after-free vulnerability in SRTP media transport

    PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Curren…

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2023-36465

    Decidim has broken access control in templates

    Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The `templates` module doesn't enforce the correct permissions, allowing any logged-in u…

    decidim decidim decidim decidim-templates RubyGems
  • Critical 9.8
    CVE-2023-4530

    SQLi in Turna Media's Advertising Administration Panel

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1.

    Turna Advertising Administration Panel
  • Critical 9.8
    CVE-2023-45311

    Code injection in fsevents

    fsevents before 1.2.11 depends on the https://fsevents-binaries.s3-us-west-2.amazonaws.com URL, which might allow an adversary to execute arbitrary code if any JavaScript project (that depends on fsevents) distributes code that was obtained from that URL at a…

    qtwebengine-opensource-src npm fsevents Ubuntu npm