Archive

25 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /25 November 2023 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 7.6

CVE-2023-5044 Public exploit EPSS 54%

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation

Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

Kubernetes ingress-nginx k8s.io/ingress-nginx Go

Oct 25, 2023
High 7.6

CVE-2023-5043 Public exploit

Ingress nginx annotation injection causes arbitrary command execution

Ingress nginx annotation injection causes arbitrary command execution.

Kubernetes ingress-nginx k8s.io/ingress-nginx Go

Oct 25, 2023
High 7.8

CVE-2023-5717 Public exploit

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

A heap out-of-bounds write vulnerability in the Linux kernel's Linux Kernel Performance Events (perf) component can be exploited to achieve local privilege escalation. If perf_read_group() is called while an event's sibling_list is smaller than its child's si…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Oct 25, 2023
High 7.8

CVE-2023-38041 Public exploit

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a …

ivanti Secure Access Client Network devices

Oct 25, 2023