Skip to content
OpenAdvisories

Archive

16 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /16 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

87 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-45274

    WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in SendPulse SendPulse Free Web Push plugin <= 1.3.1 versions.

    sendpulse SendPulse Free Web Push
  • Medium 4.3
    CVE-2023-45273

    WordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Matt McKenny Stout Google Calendar plugin <= 1.2.3 versions.

    Matt McKenny Stout Google Calendar
  • Medium 5.3
    CVE-2023-38059

    External pictures can be loaded even if not allowed by configuration

    The loading of external images is not blocked, even if configured, if the attacker uses protocol-relative URL in the payload. This can be used to retreive the IP of the user.This issue affects OTRS: from 7.0.X before 7.0.47, from 8.0.X before 8.0.37; ((OTRS))…

    OTRS OTRS ((OTRS)) Community Edition otrs2 Ubuntu
  • Medium 6.5
    CVE-2023-43666

    Apache InLong: General user Unauthorized access User Management

    Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0,  General user can view all user data like Admin account. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-…

    Apache Software Foundation Apache InLong org.apache.inlong:inlong Maven
  • Medium 6.5
    CVE-2023-21415

    Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to p…

    Axis Communications AB AXIS OS
  • Medium 4.9
    CVE-2023-40377

    IBM i privilege escalation

    Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host op…

    IBM i
  • Medium 5.3
    CVE-2023-33836

    IBM Security Verify Governance information disclosure

    IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 2560…

    IBM Security Verify Governance