Skip to content
OpenAdvisories

Archive

15 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /15 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Low 3.3
    CVE-2023-35018

    IBM Security Verify Governance file upload

    IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382.

    IBM Security Verify Governance
  • Low 2.3
    CVE-2023-35013

    IBM Security Verify Governance information disclosure

    IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.

    IBM Security Verify Governance
  • High 7.3
    CVE-2023-5589

    SourceCodester Judging Management System login.php sql injection

    A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument password leads to sql injection. The attack can be ini…

    SourceCodester Judging Management System
  • High 7.5
    CVE-2023-5590

    NULL Pointer Dereference in seleniumhq/selenium

    NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.

    seleniumhq seleniumhq/selenium selenium PyPI
  • Low 2.6
    CVE-2023-5588

    kphrx pleroma pack.ex Pleroma.Emoji.Pack path traversal

    A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emoji.Pack of the file lib/pleroma/emoji/pack.ex. The manipulation of the argument name leads to path traversal. The complexity of an attack i…

    kphrx pleroma pleroma Hex
  • Medium 6.3
    CVE-2023-5587

    SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection

    A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The mani…

    SourceCodester Free Hospital Management System for Small Practices
  • Medium 4.9
    CVE-2023-40378

    IBM i privilege escalation

    IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584.

    IBM i
  • Medium 4.4
    CVE-2023-5586

    NULL Pointer Dereference in gpac/gpac

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

    gpac gpac/gpac gpac gpac Debian Ubuntu
  • Unscored —
    CVE-2023-38312

    A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game …

  • Unscored —
    CVE-2023-45871

    An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Medium 6.1
    CVE-2018-25091

    Authorization Header forwarded on redirect

    urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts o…

    python-pip urllib3 python-urllib3 python-urllib3 Debian Ubuntu PyPI