CVEs published in September 2023
21 tracked CVEs from 9 vendors had their first vendor advisory published in September 2023: 2 critical, 7 high, 2 in CISA KEV. Newest first.
10 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2023-5207High
Execution with Unnecessary Privileges in GitLab
GitLab · 1 advisory - Added
CVE-2023-3920Medium
Incorrect Authorization in GitLab
GitLab · 1 advisory - Added
CVE-2023-3914Medium
Incorrect User Management in GitLab
GitLab · 1 advisory - Added
Improper Validation of Specified Type of Input in GitLab
GitLab · 1 advisory - Added
Incorrect Authorization in GitLab
GitLab · 1 advisory - Added
CVE-2023-4863CriticalCISA KEV
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Commvault, NetApp · 2 advisories - Added
CVE-2023-43125Medium
BIG-IP: BIG-IP APM clients may send IP traffic outside of the VPN tunnel.
F5 · 1 advisory - Added
CVE-2023-43124Medium
BIG-IP: BIG-IP APM clients may send IP traffic outside of the VPN tunnel.
F5 · 1 advisory - Added
CVE-2023-23364High
Multimedia Console: buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems.
QNAP · 1 advisory - Added
CVE-2023-23363High
QTS: buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system.
QNAP · 1 advisory - Added
CVE-2023-23362High
QTS: OS command injection vulnerability has been reported to affect QNAP operating systems.
QNAP · 1 advisory - Added
CVE-2023-22513High
Confluence: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 8.0.0 of Bitbucket Data Center and Server
Atlassian · 1 advisory - Added
CVE-2023-5009High
GitLab · 1 advisory - Added
CVE-2023-4806Medium
potential use-after-free in getaddrinfo
NetApp, Red Hat · 2 advisories - Added
CVE-2023-4527Medium
stack read overflow in getaddrinfo in no-aaaa mode
NetApp, Red Hat · 2 advisories - Added
CVE-2022-48522Critical
Perl Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2023-4630Medium
Missing Authorization in GitLab
GitLab · 1 advisory - Added
CVE-2022-27599Medium
QVR: insertion of sensitive information into Log file vulnerability has been reported to affect product.
QNAP · 1 advisory - Added
CVE-2023-30800High
RouterOS: The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue.
MikroTik · 1 advisory - Added
CVE-2023-20269MediumCISA KEV
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
Cisco · 1 advisory - Added
CVE-2023-4018Medium
Direct Request ('Forced Browsing') in GitLab
GitLab · 1 advisory