Skip to content
OpenAdvisories

Archive

16 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /16 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2023-45131 Public exploit

    Unauthenticated access to new private chat messages in Discourse

    Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issue is patched in the 3.1.1 stable and 3.2.0.beta2 versions of Discourse. Users are advised to upgrade…

    Discourse Discourse
  • Medium 5.3
    CVE-2023-5089 Public exploit Scanner template

    Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)

    The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthenticated visitor to access the login page, even when the hide login page functionality of the plugin …

    Web / CMS
  • High 7.2
    CVE-2023-4861 Public exploit

    File Manager Pro < 1.8.1 - Admin+ Remote Code Execution

    The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code executio…

    Web / CMS
  • Medium 6.5
    CVE-2023-4800 Public exploit

    DoLogin Security < 3.7.1 - Subscriber+ IP Address leak

    The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users.

    Web / CMS
  • Medium 5.3
    CVE-2023-5561 Public exploit Scanner template

    WordPress < 6.3.2 - Unauthenticated Post Author Email Disclosure

    WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of users who have published public posts on an affected website via an Oracle style attack

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
  • Critical 10.0
    CVE-2023-20198 Exploited Public exploit Scanner template EPSS 100%

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 16, 2023
  • Unscored —
    CVE-2023-45158 Public exploit

    An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notify…

    web2py web2py web2py Ubuntu
  • Unscored —
    CVE-2023-45542 Public exploit Scanner template

    Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a cr…

  • Unscored —
    CVE-2023-45540 Public exploit

    An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted …