Skip to content
OpenAdvisories

Archive

29 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /29 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-4393

    HTML and SMTP Injection in LiquidFiles

    HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against an organization.

    LiquidFiles Pty liquidfiles
  • Medium 6.3
    CVE-2007-10003

    The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection

    A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress. This issue affects some unknown processing of the file ajax_blurb.php of the component HTTP POST Request Handler. The manipulation of the a…

  • Medium 5.5
    CVE-2005-10002

    almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

    A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress. Affected is the function sf_downloads of the file secure-files.php. The manipulation of the argument downloadfile leads to path traver…

    almosteffortless secure-files Plugin
  • Medium 6.3
    CVE-2021-33634

    Malicious image running containers may cause DoS attacks

    iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.

    openEuler lcr
  • Medium 4.9
    CVE-2023-40686

    IBM i privilege escalation

    Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability. A malicious actor with command line access to the operating system can exploit this vulnerability to elevate privileges to gain component…

    IBM i
  • Medium 6.5
    CVE-2023-43041

    IBM QRadar information disclosure

    IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data from other domains. This vulnerability is due to an incomplete fix for CVE-2022-34352. IBM X-Force ID…

    IBM QRadar SIEM
  • Medium 4.1
    CVE-2023-5838

    Insufficient Session Expiration in linkstackorg/linkstack

    Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9.

    LinkStackOrg linkstackorg/linkstack
  • Medium 6.5
    CVE-2023-5840

    Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack

    Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9.

    LinkStackOrg linkstackorg/linkstack