2023-07-30

2023-07-31

2023-08-01

All (53) Critical (13) High (9) Medium (31)

CVE-2023-4007 Jul 31, 01:15 MEDIUM PATCH This Month

Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.16. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity.

XSS Phpmyfaq

NVD GitHub

CVSS 3.1

5.4

EPSS

0.4%

CVE-2023-3462 Jul 31, 23:15 MEDIUM PATCH This Month

HashiCorp's Vault and Vault Enterprise are vulnerable to user enumeration when using the LDAP auth method. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Hashicorp Vault

NVD

CVSS 3.1

5.3

EPSS

0.6%

CVE-2023-3817 Jul 31, 16:15 MEDIUM PATCH This Month

Issue summary: Checking excessively long DH keys or parameters may be very slow. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service OpenSSL

NVD

CVSS 3.1

5.3

EPSS

2.6%

Prev Page 2 of 2