Skip to content
OpenAdvisories

Archive

27 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /27 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Unscored —
    CVE-2023-40133 Public exploit

    In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused dep…

    Google Android Android
  • Unscored —
    CVE-2023-40127 Public exploit

    In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local…

    Google Android Android
  • High 7.8
    CVE-2023-40130 Public exploit

    In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. T…

    Google Android Android
  • Critical 10.0
    CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
    KEV Nov 2, 2023
  • Unscored —
    CVE-2023-35794 Public exploit

    An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) c…

  • High 7.2
    CVE-2023-46818 Public exploit Scanner template EPSS 19%

    An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by…

  • High 7.0
    CVE-2023-46813 Public exploit

    An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO regi…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-45499 Public exploit

    VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.

  • Critical 9.8
    CVE-2023-45498 Public exploit EPSS 22%

    VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerabilit…