Skip to content
OpenAdvisories

Archive

October 2023

Vulnerabilities first published in this month (UTC), newest first.

124 results · Clear filters · Feed

  • High 7.8
    CVE-2023-4911 Exploited Public exploit EPSS 64%

    Glibc: buffer overflow in ld.so leading to privilege escalation

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

    KEV Nov 21, 2023
  • High 8.2
    CVE-2023-3350 Public exploit

    Cryptographic Issues on IBERMATICA RPS

    A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes code…

  • Medium 6.4
    CVE-2023-5350 Public exploit

    SQL Injection in salesagility/suitecrm

    SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

  • Medium 4.3
    CVE-2023-5324 Public exploit

    eeroOS Ethernet Interface denial of service

    A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interface. The manipulation leads to denial of service. The attack needs to be approached within the local n…