CVEs published September 6, 2023
159 CVEs were published on September 6, 2023: 6 critical, 46 high. 1 is now in CISA KEV.
- Published
- 159
- Critical
- 6
- High
- 46
- Medium
- 47
- Low
- 4
- Unrated
- 56
- Now in CISA KEV
- 1
- Fix available
- 69
Most affected products
- Apple macOS
- 20
- Samsung Mobile Devices
- 16
- Apache Software Foundation Apache Superset · apache-superset
- 8
- Linux Kernel
- 8
- Adobe Acrobat Reader
- 4
- Jenkins Project Jenkins AWS CodeCommit Trigger Plugin · org…
- 4
- Jenkins Project Jenkins Job Configuration History Plugin ·…
- 4
- SearchBlox
- 4
- Adobe Commerce · magento/project-community-edition +1
- 3
- Apple macOS · Apple watchOS +2
- 3
Critical 6
- CVE-2023-39967Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studiowiremock
- CVE-2023-41330Unsafe deserialization in knplabs/knp-snappyKnpLabs snappy · knplabs/knp-snappy
- CVE-2023-20238A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended SeCisco BroadWorks
- CVE-2021-36023Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code ExecutionAdobe Commerce · magento/project-community-edition +1
- CVE-2023-4589Insufficient verification of data authenticity vulnerability in Delinea Secret ServerDelinea Secret Server
- CVE-2023-4634Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Executiondglingren Media Library Assistant
High 46
- CVE-2023-23623Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electronelectron
- CVE-2023-40591Denial of service via malicious p2p message in go-ethereumgo-ethereum · github.com/ethereum/go-ethereum
- CVE-2023-41319Remote Code Execution in Custom Integration Upload in Fidesethyca fides · ethyca-fides
- CVE-2023-38486Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and GatewaysHewlett Packard Enterprise (HPE) 9200 Series Mobility Contr…
- CVE-2023-38485Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and GatewaysHewlett Packard Enterprise (HPE) 9200 Series Mobility Contr…
- CVE-2023-38484Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and GatewaysHewlett Packard Enterprise (HPE) 9200 Series Mobility Contr…
- CVE-2023-20243A vulnerability in the RADIUS message processing feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attaCisco Identity Services Engine Software
- CVE-2023-4623Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) componentLinux Kernel
- CVE-2023-4622Use-after-free in Linux kernel's af_unix componentLinux Kernel
- CVE-2023-4244Use-after-free in Linux kernel's netfilter: nf_tables componentLinux Kernel
- CVE-2023-4208Use-after-free in Linux kernel's net/sched: cls_u32 componentLinux Kernel
- CVE-2023-4207Use-after-free in Linux kernel's net/sched: cls_fw componentLinux Kernel
- CVE-2023-4206Use-after-free in Linux kernel's net/sched: cls_route componentLinux Kernel
- CVE-2023-4015Use-after-free in Linux kernel's netfilter: nf_tables componentLinux Kernel
- CVE-2023-3777Use-after-free in Linux kernel's netfilter: nf_tables componentLinux Kernel
- CVE-2021-21088Adobe Acrobat Pro DC Use-After-Free Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-36036Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code ExecutionAdobe Commerce · magento/project-community-edition +1
- CVE-2021-36021Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code ExecutionAdobe Commerce · magento/project-community-edition +1
- CVE-2021-35980Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2021-28644Adobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution VulnerabilityAdobe Acrobat Reader
- CVE-2023-41939Jenkins SSH2 Easy Plugin 1.4 and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users fJenkins Project Jenkins SSH2 Easy Plugin · org.jenkins-ci.p…
- CVE-2023-31188Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands.TP-LINK Archer C50 · TP-LINK Archer C55 +1
- CVE-2023-32619Archer C50 firmware versions prior to 'Archer C50(JP)_V3_230505' and Archer C55 firmware versions prior to 'Archer C55(JP)_V1_230506' use haTP-LINK Archer C50 · TP-LINK Archer C55
- CVE-2023-38588Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary OTP-LINK Archer C3150
- CVE-2023-40357Multiple TP-LINK products allow a network-adjacent authenticated attacker to execute arbitrary OS commands.TP-LINK Archer AX50 · TP-LINK Archer A10 +2
- CVE-2023-40601WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)Estatik Mortgage Calculator
- CVE-2023-40554WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)Blog2Social, Adenion Blog2Social: Social Media Auto Post &…
- CVE-2023-30497WordPress LINE Notify Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)Simon Chuang WP LINE Notify
- CVE-2023-29441WordPress WebLibrarian Plugin <= 3.5.8.1 is vulnerable to Cross Site Scripting (XSS)Robert Heller WebLibrarian
- CVE-2023-3472Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.Panasonic KW Watcher on Windows
- CVE-2023-3471Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary code.Panasonic KW Watcher
- CVE-2023-32163Wacom Drivers for Windows Link Following Local Privilege Escalation VulnerabilityWacom Drivers for Windows
- CVE-2023-32162Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation VulnerabilityWacom Drivers for Windows
- CVE-2023-30729Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the network traffic includingSamsung Mobile Samsung Email
- CVE-2023-30710Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.Samsung Mobile Devices
- CVE-2023-30709Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.Samsung Mobile Devices
- CVE-2023-30706Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege.Samsung Mobile Devices
- CVE-2023-4719Simple Membership <= 4.3.5 - Reflected Cross-Site Scriptingwpinsider-1 Simple Membership
- CVE-2023-28214A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28215A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-32356A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28212A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28209A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28213A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28210A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28211A buffer overflow issue was addressed with improved memory handling.Apple macOS
Medium, low and unrated 107
- CVE-2023-38605This issue was addressed with improved redaction of sensitive information.Apple macOS
- CVE-2023-40392A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2023-38616A race condition was addressed with improved state handling.Apple macOS
- CVE-2023-40397The issue was addressed with improved checks.Apple macOS
- CVE-2023-41327Controlled SSRF through URL in the WireMockwiremock · org.wiremock:wiremock-webhooks-extension
- CVE-2023-41329Domain restrictions bypass via DNS Rebinding in WireMock and WireMock Studiowiremock · org.wiremock:wiremock-standalone +3
- CVE-2023-41053Redis SORT_RO may bypass ACL configurationredis
- CVE-2023-29198Context isolation bypass via nested unserializable return value in Electronelectron
- CVE-2023-39956Electron: Out-of-package code execution when launched with arbitrary cwdelectron
- CVE-2023-4809pf incorrectly handles multiple IPv6 fragment headersFreeBSD
- CVE-2020-10132CVE-2020-10132SearchBlox
- CVE-2020-10131CVE-2020-10131SearchBlox
- CVE-2020-10130CVE-2020-10130SearchBlox
- CVE-2020-10129CVE-2020-10129SearchBlox
- CVE-2023-41050Information disclosure through Python's "format" functionality in Zope AccessControlzopefoundation AccessControl · accesscontrol +1
- CVE-2023-41328Possibility limited SQL injection due to insufficient validation in Frappefrappe
- CVE-2023-39511Stored Cross-Site-Scripting on reports_admin.php device name in Cacticacti
- CVE-2023-0925Software AG webMethods OneData Deserialization VulnerabilitySoftware AG webMethods OneData
- CVE-2023-20263A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker toCisco HyperFlex HX Data Platform
- CVE-2023-20269A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTDCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2023-20250A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an autheCisco Small Business RV Series Router Firmware
- CVE-2023-4498Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem RouterTenda N300 Wireless N VDSL2 Modem Router
- CVE-2023-32672Apache Superset: SQL parser edge case bypasses data access authorizationApache Software Foundation Apache Superset · apache-superset
- CVE-2021-39859Use After Free Adobe Acrobat Pro DC [HB-21-0339]Adobe Acrobat Reader
- CVE-2021-36060Adobe Media Encoder MPEG File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityAdobe Media Encoder
- CVE-2023-37941Apache Superset: Metadata db write access can lead to remote code executionApache Software Foundation Apache Superset · apache-superset
- CVE-2023-39265Apache Superset: Possible Unauthorized Registration of SQLite Database ConnectionsApache Software Foundation Apache Superset · apache-superset
- CVE-2023-39264Apache Superset: Stack traces enabled by defaultApache Software Foundation Apache Superset · apache-superset
- CVE-2023-27523Apache Superset: Improper data permission validation on Jinja templated queriesApache Software Foundation Apache Superset · apache-superset
- CVE-2023-36388Apache Superset: Improper API permission for low privilege users allows for SSRFApache Software Foundation Apache Superset · apache-superset
- CVE-2023-27526Apache Superset: Improper Authorization check on import chartsApache Software Foundation Apache Superset · apache-superset
- CVE-2023-41150F-RevoCRM 7.3 series prior to version7.3.8 contains a cross-site scripting vulnerability.Thinkingreed F-RevoCRM
- CVE-2023-41149F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability.Thinkingreed F-RevoCRM
- CVE-2023-36387Apache Superset: Improper API permission for low privilege usersApache Software Foundation Apache Superset · apache-superset
- CVE-2023-41947A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permission to connect to FrugJenkins Project Jenkins Frugal Testing Plugin · io.jenkins.…
- CVE-2023-41946A cross-site request forgery (CSRF) vulnerability in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers to connect to Frugal TesJenkins Project Jenkins Frugal Testing Plugin · io.jenkins.…
- CVE-2023-41945Jenkins Assembla Auth Plugin 1.14 and earlier does not verify that the permissions it grants are enabled, resulting in users with EDIT permiJenkins Project Jenkins Assembla Auth Plugin · org.jenkins-…
- CVE-2023-41944Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not escape the queue name parameter passed to a form validation URL, when rendJenkins Project Jenkins AWS CodeCommit Trigger Plugin · org…
- CVE-2023-41943Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with OvJenkins Project Jenkins AWS CodeCommit Trigger Plugin · org…
- CVE-2023-41942A cross-site request forgery (CSRF) vulnerability in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers to clear the Jenkins Project Jenkins AWS CodeCommit Trigger Plugin · org…
- CVE-2023-41941A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with Overall/Read permission to enumJenkins Project Jenkins AWS CodeCommit Trigger Plugin · org…
- CVE-2023-41940Jenkins TAP Plugin 2.3 and earlier does not escape TAP file contents, resulting in a stored cross-site scripting (XSS) vulnerability exploitJenkins Project Jenkins TAP Plugin · org.tap4j:tap
- CVE-2023-41938A cross-site request forgery (CSRF) vulnerability in Jenkins Ivy Plugin 2.5 and earlier allows attackers to delete disabled modules.Jenkins Project Jenkins Ivy Plugin · org.jenkins-ci.plugins…
- CVE-2023-41937Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, includingJenkins Project Jenkins Bitbucket Push and Pull Request Plu…
- CVE-2023-41936Jenkins Google Login Plugin 1.7 and earlier uses a non-constant time comparison function when checking whether the provided and expected tokJenkins Project Jenkins Google Login Plugin · org.jenkins-c…
- CVE-2023-41935Jenkins Azure AD Plugin 396.v86ce29279947 and earlier, except 378.380.v545b_1154b_3fb_, uses a non-constant time comparison function when chJenkins Project Jenkins Azure AD Plugin · org.jenkins-ci.pl…
- CVE-2023-41934Jenkins Pipeline Maven Integration Plugin 1330.v18e473854496 and earlier does not properly mask (i.e., replace with asterisks) usernames of Jenkins Project Jenkins Pipeline Maven Integration Plugin ·…
- CVE-2023-41933Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not configure its XML parser to prevent XML external entity (XJenkins Project Jenkins Job Configuration History Plugin ·…
- CVE-2023-41932Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict 'timestamp' query parameters in multiple endpointJenkins Project Jenkins Job Configuration History Plugin ·…
- CVE-2023-41931Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not property sanitize or escape the timestamp value from histoJenkins Project Jenkins Job Configuration History Plugin ·…
- CVE-2023-41930Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a histoJenkins Project Jenkins Job Configuration History Plugin ·…
- CVE-2023-4588File accessibility vulnerability in Delinea Secret ServerDelinea Secret Server
- CVE-2023-36489Multiple TP-LINK products allow a network-adjacent unauthenticated attacker to execute arbitrary OS commands.TP-LINK TL-WR802N · TP-LINK TL-WR841N +1
- CVE-2023-37284Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenTP-LINK Archer C20
- CVE-2023-38563Archer C1200 firmware versions prior to 'Archer C1200(JP)_V2_230508' and Archer C9 firmware versions prior to 'Archer C9(JP)_V3_230508' alloTP-LINK Archer C1200 · TP-LINK Archer C9
- CVE-2023-38568Archer A10 firmware versions prior to 'Archer A10(JP)_V2_230504' allows a network-adjacent unauthenticated attacker to execute arbitrary OS TP-LINK Archer A10
- CVE-2023-39224Archer C5 firmware all versions and Archer C7 firmware versions prior to 'Archer C7(JP)_V2_230602' allow a network-adjacent authenticated atTP-LINK Archer C5 · TP-LINK Archer C7
- CVE-2023-39935Archer C5400 firmware versions prior to 'Archer C5400(JP)_V2_230506' allows a network-adjacent authenticated attacker to execute arbitrary OTP-LINK Archer C5400
- CVE-2023-40193Deco M4 firmware versions prior to 'Deco M4(JP)_V2_1.5.8 Build 20230619' allows a network-adjacent authenticated attacker to execute arbitraTP-LINK Deco M4
- CVE-2023-40531Archer AX6000 firmware versions prior to 'Archer AX6000(JP)_V1_1.3.0 Build 20221208' allows a network-adjacent authenticated attacker to exeTP-LINK Archer AX6000
- CVE-2023-40007WordPress CT Commerce Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)Ujwol Bastakoti CT Commerce
- CVE-2023-40328WordPress Carrot Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)Carrrot
- CVE-2023-40329WordPress Custom Admin Login Page | WPZest Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)Custom Admin Login Page | WPZest
- CVE-2023-40553WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)Plausible.io Plausible Analytics
- CVE-2023-40552WordPress Fitness calculators plugin Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)Gurcharan Singh Fitness calculators plugin
- CVE-2023-40560WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Scripting (XSS)Greg Ross Schedule Posts Calendar
- CVE-2023-4779User Submitted Posts – Enable Users to Submit Posts from the Front End <= 20230811 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodespecialk User Submitted Posts – Enable Users to Submit Post…
- CVE-2023-35719ManageEngine ADSelfService Plus GINA Client Insufficient Verification of Data Authenticity Authentication Bypass VulnerabilityManageEngine ADSelfService Plus
- CVE-2023-4773WordPress Social Login <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodemiled WordPress Social Login
- CVE-2023-30730Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android Samsung Mobile Camera
- CVE-2023-30728Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file.Samsung Mobile PackageInstallerCHN
- CVE-2023-30726PendingIntent hijacking vulnerability in GameLauncher prior to version 4.2.59.5 allows local attackers to access data.Samsung Mobile GameLauncher
- CVE-2023-30725Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.Samsung Mobile Gallery
- CVE-2023-30724Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.Samsung Mobile Gallery
- CVE-2023-30723Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Samsung Mobile Samsung Health
- CVE-2023-30722Protection Mechanism Failure in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.13.5 allows local attacker to execute Samsung Mobile Samsung Blockchain Keystore
- CVE-2023-30721Insertion of sensitive information into log vulnerability in Locksettings prior to SMR Sep-2023 Release 1 allows a privileged local attackerSamsung Mobile Devices
- CVE-2023-30720PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access.Samsung Mobile Devices
- CVE-2023-30719Exposure of Sensitive Information vulnerability in InboundSmsHandler prior to SMR Sep-2023 Release 1 allows local attackers to access certaiSamsung Mobile Devices
- CVE-2023-30718Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows Samsung Mobile Devices
- CVE-2023-30717Sensitive information exposure vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to get unresettable identifiers.Samsung Mobile Devices
- CVE-2023-30716Improper access control vulnerability in SVCAgent prior to SMR Sep-2023 Release 1 allows attackers to trigger certain commands.Samsung Mobile Devices
- CVE-2023-30715Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in WeatSamsung Mobile Devices
- CVE-2023-30714Improper authorization vulnerability in FolderContainerDragDelegate in One UI Home prior to SMR Sep-2023 Release 1 allows physical attackersSamsung Mobile Devices
- CVE-2023-30713Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to cSamsung Mobile Devices
- CVE-2023-30712Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.Samsung Mobile Devices
- CVE-2023-30711Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.Samsung Mobile Devices
- CVE-2023-30708Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock sSamsung Mobile Devices
- CVE-2023-30707Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attacSamsung Mobile Devices
- CVE-2023-34352A permissions issue was addressed with improved redaction of sensitive information.Apple macOS · Apple watchOS +2
- CVE-2023-32438This issue was addressed with improved checks to prevent unauthorized actions.Apple iOS and iPadOS · Apple tvOS +2
- CVE-2023-28188A denial-of-service issue was addressed with improved input validation.Apple macOS
- CVE-2023-29166A logic issue was addressed with improved state management.Apple Pro Video Formats
- CVE-2023-32432A privacy issue was addressed with improved handling of temporary files.Apple macOS · Apple watchOS +2
- CVE-2023-28195A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2023-32428This issue was addressed with improved file handling.Apple macOS · Apple watchOS +2
- CVE-2023-28208A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS
- CVE-2023-32425The issue was addressed with improved memory handling.Apple watchOS · Apple iOS and iPadOS
- CVE-2023-32370A logic issue was addressed with improved validation.Apple macOS
- CVE-2023-32426A logic issue was addressed with improved checks.Apple macOS
- CVE-2023-27950An out-of-bounds read was addressed with improved input validation.Apple macOS
- CVE-2023-32379A buffer overflow issue was addressed with improved memory handling.Apple macOS
- CVE-2023-28187This issue was addressed with improved state management.Apple macOS
- CVE-2023-32362Error handling was changed to not reveal sensitive information.Apple macOS
- CVE-2022-32920The issue was addressed with improved checks.Apple Xcode
- CVE-2021-36646A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.
- CVE-2023-41601Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts