Skip to content
OpenAdvisories

Archive

23 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /23 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Unscored —
    CVE-2023-43622 Public exploit EPSS 69%

    Apache HTTP Server: DoS in HTTP/2 with initial windows size 0

    An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" a…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Azure Linux Alpine
  • Unscored —
    CVE-2023-45802 Public exploit

    Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

    When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping t…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Medium 4.3
    CVE-2023-5702 Public exploit EPSS 19%

    Viessmann Vitogate 300 direct request

    A vulnerability was found in Viessmann Vitogate 300 up to 2.1.3.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /cgi-bin/. The manipulation leads to direct request. The exploit has been disclosed to the public…

    Viessmann Vitogate 300
  • High 7.5
    CVE-2023-45966 Public exploit

    umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

  • Medium 5.4
    CVE-2023-44760 Public exploit

    Concrete CMS Cross-site Scripting vulnerability

    Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics. NOTE: the vendor disputes this because these header/f…

    concrete5/concrete5 Packagist
  • Unscored —
    CVE-2023-37635 Public exploit

    UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to g…

  • Unscored —
    CVE-2023-43358 Public exploit

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a cr…