Skip to content
OpenAdvisories

Archive

26 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /26 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-46747 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    BIG-IP Configuration utility unauthenticated remote code execution vulnerability

    Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have …

    F5 BIG-IP Network devices
    KEV Oct 31, 2023
  • Medium 6.5
    CVE-2023-31419 Public exploit EPSS 61%

    Elasticsearch StackOverflow vulnerability

    A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.

    Elastic Elasticsearch elasticsearch org.elasticsearch:elasticsearch Ubuntu Maven
  • Unscored —
    CVE-2023-46449 Public exploit

    Sourcecodester Free and Open Source inventory management system v1.0 is vulnerable to Incorrect Access Control. An arbi…

  • Unscored —
    CVE-2023-46450 Public exploit

    Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the…

  • Unscored —
    CVE-2023-43352 Public exploit

    An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Conte…

  • Critical 9.8
    CVE-2023-43208 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that…

    KEV May 20, 2024