CVEs published September 24, 2023
8 CVEs were published on September 24, 2023: 0 critical, 2 high.
- Published
- 8
- Critical
- 0
- High
- 2
- Medium
- 5
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- D-Link DAR-7000
- 2
- openstack-barbican · Red Hat OpenStack Platform +2
- 2
- D-Link DAR-7000 · D-Link DAR-8000
- 1
- github.com/openshift/apiserver-library-go · Red Hat OpenShi…
- 1
- H3C GR-1100-P · H3C GR-1108-P +13
- 1
- openstack-heat · Red Hat OpenStack Platform +1
- 1
High 2
Medium, low and unrated 6
- CVE-2023-5145D-Link DAR-7000 licence.php unrestricted uploadD-Link DAR-7000
- CVE-2023-5144D-Link DAR-7000/DAR-8000 updateos.php unrestricted uploadD-Link DAR-7000 · D-Link DAR-8000
- CVE-2023-5143D-Link DAR-7000 webmailattach.php Privilege EscalationD-Link DAR-7000
- CVE-2023-5142H3C ER6300G2 Config File userLogin.asp path traversalH3C GR-1100-P · H3C GR-1108-P +13
- CVE-2023-1633Insecure barbican configuration file leaking credentialopenstack-barbican · Red Hat OpenStack Platform +2
- CVE-2023-1636Incomplete container isolationopenstack-barbican · Red Hat OpenStack Platform +2