Skip to content
OpenAdvisories

Archive

23 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /23 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 7.8
    CVE-2023-5633

    Kernel: vmwgfx: reference count issue leads to use-after-free in surface handling

    The reference count changes made as part of the CVE-2023-33951 and CVE-2023-33952 fixes exposed a use-after-free flaw in the way memory objects were handled when they were being used to store a surface. When running inside a VMware guest with 3D acceleration …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.2
    CVE-2023-33839

    IBM Security Verify Governance command execution

    IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.

    IBM Security Verify Governance
  • High 8.2
    CVE-2023-28804

    Linux ZCC allows unsigned updates, allowing elevated Code Execution

    An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105

    Zscaler Client Connector
  • High 7.1
    CVE-2023-28796

    IPC Bypass Through PLT Section in ELF

    Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

    Zscaler Client Connector
  • High 7.8
    CVE-2023-28795

    Client IPC validation bypass

    Origin Validation Error vulnerability in Zscaler Client Connector on Linux allows Inclusion of Code in Existing Process. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

    Zscaler Client Connector
  • High 7.8
    CVE-2023-28793

    Heap Based Buffer Overflow in Library

    Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

    Zscaler Client Connector
  • High 7.8
    CVE-2021-26738

    Privilege Escalation for ZCC macOS via PATH Variable

    Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges.

    Zscaler Client Connector
  • High 8.8
    CVE-2023-5246

    Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074…

    SICK FX0-GENT00010 FX0-GPNT00010 FX0-GETC00000
  • High 7.5
    CVE-2023-33517

    carRental 1.0 is vulnerable to Incorrect Access Control (Arbitrary File Read on the Back-end System).

  • High 7.5
    CVE-2023-46324

    free5GC udm vulnerable to Invalid Curve Attack

    pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which…

    github.com/free5gc/udm Go
  • High 7.5
    CVE-2023-45966 Public exploit

    umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.