Skip to content
OpenAdvisories

Archive

3 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /3 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2024-1064

    Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4

    A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header

    Arcadia Technology Crafty Controller
  • High 8.3
    CVE-2023-31004

    IBM Security Access Manager Container gain access

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote attacker to gain access to the underlying system using man in the middl…

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High 7.1
    CVE-2023-32327

    IBM Security Access Manager Container XML external entity injection

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A r…

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High 7.3
    CVE-2023-43016

    IBM Security Access Manager Container unauthorized access

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty passwor…

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High 7.5
    CVE-2023-30999

    IBM Security Access Manager denial of service

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumptio…

    IBM Security Verify Access Docker Security Verify Access Appliance
  • High —
    GHSA-3gjh-29fv-8hr6

    Nervos CKB Snappy decompress length can be very large and causes out of memory error

    ### Impact Adversary can create message which compressed size is less than the package limit but the decompressed length is very large such as 1G. It will cost the node many memories to process the network messages, and on the system with less than 1G memory,…

    ckb crates.io
  • High —
    GHSA-wjxc-pjx9-4wvm

    Nervos CKB Panic on malformed input

    ### Impact CKB process will panic when received malformed p2p message because of snappy, which is used to compress network messages ### References https://github.com/BurntSushi/rust-snappy/issues/29

    ckb crates.io
  • High 7.5
    CVE-2023-44031

    Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbit…

  • High 8.8
    CVE-2023-43183

    Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows read-only users to…