Skip to content
OpenAdvisories

Archive

8 November 2023

Vulnerabilities first published on this day (UTC), newest first.

← October 2023 2023 / November /8 December 2023 →
  1. 1144
  2. 296
  3. 3108
  4. 48
  5. 57
  6. 6118
  7. 7163
  8. 8111
  9. 9100
  10. 1039
  11. 115
  12. 1236
  13. 1382
  14. 14339
  15. 1575
  16. 16131
  17. 1773
  18. 1844
  19. 191
  20. 2075
  21. 2162
  22. 22168
  23. 2350
  24. 2417
  25. 25 
  26. 269
  27. 2795
  28. 2872
  29. 2957
  30. 30205
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.9
    CVE-2023-0392

    The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execu…

    Okta LDAP Agent
  • Low —
    GHSA-r2xv-vpr2-42m9

    slsa-verifier vulnerable to mproper validation of npm's publish attestations

    ### Summary `slsa-verifier<=2.4.0` does not correctly verify npm's [publish](https://github.com/npm/attestation/tree/main/specs/publish/v0.1) attestations signature. ### Proof of concept Steps to reproduce: 1. `curl -Sso attestations.json $(npm view @trishank…

    github.com/slsa-framework/slsa-verifier github.com/slsa-framework/slsa-verifier/v2 Go
  • Low —
    GHSA-475v-pq2g-fp9g

    s2n-quic potential denial of service via crafted stream frames

    ### Impact An issue in s2n-quic could result in unnecessary resource utilization when peers open streams beyond advertised limits. Impacted versions: <= v1.30.0. ### Patches The patch is included in v1.31.0 [1]. ### Workarounds There is no workaround. Applica…

    s2n-quic crates.io
  • Low 3.5
    CVE-2023-41270

    Samsung Smart TV UE40D7000 WPS DoS attack

    Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-1033.2 and before allows attackers to cause a denial of service via WPS attack tools.

    Samsung TV UE40D7000