Skip to content
OpenAdvisories

Archive

October 2023

Vulnerabilities first published in this month (UTC), newest first.

← September 2023 2023 / October November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-22518 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authori…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Nov 7, 2023
  • Critical 10.0
    CVE-2023-46604 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class …

    Apache Software Foundation Apache ActiveMQ Apache ActiveMQ Legacy OpenWire Module activemq Debian Ubuntu Maven
    KEV Nov 2, 2023
  • Critical 9.8
    CVE-2023-45498 Public exploit EPSS 22%

    VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerabilit…

  • Critical 9.8
    CVE-2023-46747 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    BIG-IP Configuration utility unauthenticated remote code execution vulnerability

    Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have …

    F5 BIG-IP Network devices
    KEV Oct 31, 2023
  • Critical 9.8
    CVE-2023-43208 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that…

    KEV May 20, 2024
  • Critical 9.1
    CVE-2023-37908 Public exploit

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. The cleaning of attributes during XHTML rendering, introduced in version 14.6-rc-1, allowed the injection of arbitrary HTML code and thus cross-si…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-xml Maven
  • Critical 9.8
    CVE-2023-34051 Public exploit EPSS 48%

    VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor ca…

  • Critical 9.8
    CVE-2023-5204 Public exploit Scanner template

    AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

    The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This mak…

    Quantum Cloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Web / CMS
  • Critical 10.0
    CVE-2023-20198 Exploited Public exploit Scanner template EPSS 100%

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IO…

    Cisco Cisco IOS XE Software iOS Network devices
    KEV Oct 16, 2023
  • Critical 9.7
    CVE-2023-34992 Public exploit Scanner template EPSS 82%

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

    Fortinet FortiSIEM Network devices
  • Critical 9.4
    CVE-2023-4966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Unauthenticated sensitive information disclosure

    Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

    Citrix NetScaler ADC  NetScaler Gateway Network devices
    KEV Oct 18, 2023
  • Critical 10.0
    CVE-2023-22515 Exploited · Ransomware Public exploit Scanner template EPSS 99%

    Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploite…

    Atlassian Confluence Server Confluence Data Center Web / CMS
    KEV Oct 5, 2023