Skip to content
OpenAdvisories

Archive

25 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /25 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.6
    CVE-2023-5044 Public exploit EPSS 54%

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go
  • High 7.6
    CVE-2023-5043 Public exploit

    Ingress nginx annotation injection causes arbitrary command execution

    Ingress nginx annotation injection causes arbitrary command execution.

    Kubernetes ingress-nginx k8s.io/ingress-nginx Go
  • Unscored —
    CVE-2023-40404 Public exploit

    A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sonoma 14.1. An app …

    Apple macOS macOS
  • Critical 9.1
    CVE-2023-37908 Public exploit

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-si…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven
  • High 7.8
    CVE-2023-5717 Public exploit

    Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

    A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's si…

    Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-38041 Public exploit

    A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a …

    ivanti Secure Access Client Network devices