Archive

10 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /10 November 2023 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.5

CVE-2023-43786 Public exploit

Libx11: stack exhaustion from infinite recursion in putsubimage()

A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine

Oct 10, 2023
Medium 5.4

CVE-2023-44763 Public exploit

ConcreteCMS vulnerable to Stored Cross-site Scripting

Concrete CMS v9.2.1 is affected by an Arbitrary File Upload vulnerability via a Thumbnail file upload, which allows Cross-Site Scripting (XSS). NOTE: the vendor's position is that a customer is supposed to know that "pdf" should be excluded from the allowed f…

concrete5/concrete5 Packagist

Oct 10, 2023