Skip to content
OpenAdvisories

Archive

9 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /9 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2023-28523

    IBM Informix Dynamic Server buffer overflow

    IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.

    IBM Informix Dynamic Server
  • High 7.4
    CVE-2023-6394

    Quarkus: graphql operations over websockets bypass

    A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an…

    Red Hat Red Hat build of Quarkus Red Hat build of Quarkus 3.2.9.Final Red Hat build of Quarkus 2.13.9 Maven
  • High 8.8
    CVE-2023-49797

    Local Privilege Escalation in pyinstaller on Windows

    PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise…

    PyInstaller PyInstaller pyinstaller PyPI