Skip to content
OpenAdvisories

Archive

23 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /23 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.6
    CVE-2023-7090

    Sudo: improper handling of ipa_hostname leads to privilege mismanagement

    A flaw was found in sudo in the handling of ipa_hostname, where ipa_hostname from /etc/sssd/sssd.conf was not propagated in sudo. Therefore, it leads to privilege mismanagement vulnerability in applications, where client hosts retain privileges even after ret…

    Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian
  • Medium 4.5
    CVE-2023-49594

    An information disclosure vulnerability exists in the challenge functionality of instipod DuoUniversalKeycloakAuthentic…

    instipod DuoUniversalKeycloakAuthenticator
  • Medium 4.6
    CVE-2016-15036

    Deis Workflow Manager race condition

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Deis Workflow Manager up to 2.3.2. It has been classified as problematic. This affects an unknown part. The manipulation leads to race condition. The complexity of an attack is rather high. The expl…

    Deis Workflow Manager github.com/deis/workflow-manager Go
  • Medium 5.9
    CVE-2023-7008

    Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes

    A vulnerability was found in systemd-resolved. This issue may allow systemd-resolved to accept records of DNSSEC-signed domains even when they have no signature, allowing man-in-the-middles (or the upstream DNS resolver) to manipulate records.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Cryostat 2 Linux Debian Ubuntu Azure Linux
  • Medium 6.4
    CVE-2023-6744

    Divi <= 4.23.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'et_pb_text' shortcode in all versions up to, and including, 4.23.1 due to insufficient input sanitization and output escaping on user supplied custom field data. This …

    Elegant Themes Divi Web / CMS
  • Medium 6.5
    CVE-2023-5962

    ioLogik E1200 Series: Weak Cryptographic Algorithm Vulnerability

    A weak cryptographic algorithm vulnerability has been identified in ioLogik E1200 Series firmware versions v3.3 and prior. This vulnerability can help an attacker compromise the confidentiality of sensitive data. This vulnerability may lead an attacker to get…

    Moxa ioLogik E1200 Series ICS / OT