Skip to content
OpenAdvisories

Archive

1 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /1 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2023-5178 Public exploit

    Kernel: use after free in nvmet_tcp_free_crypto in nvme

    A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel. This issue may allow a malicious user to cause a use-after-free and double-free problem, whic…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2023-1718 Public exploit EPSS 29%

    Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

    Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmp_url".

    Bitrix24 Bitrix24
  • High 7.5
    CVE-2023-4197 Public exploit EPSS 36%

    Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

    Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.

    Dolibarr Dolibarr ERP/CRM dolibarr dolibarr/dolibarr Ubuntu Packagist