Skip to content
OpenAdvisories

Archive

24 January 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 8.8
    CVE-2023-24422 Public exploit

    Sandbox bypass in Jenkins Script Security Plugin

    A sandbox bypass vulnerability involving map constructors in Jenkins Script Security Plugin 1228.vd93135a_2fb_25 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execut…

  • High 7.8
    CVE-2023-20904 Public exploit

    In getTrampolineIntent of SettingsActivity.java, there is a possible launch of arbitrary activity due to an Intent mism…

  • High 7.3
    CVE-2023-20921 Public exploit

    In onPackageRemoved of AccessibilityManagerService.java, there is a possibility to automatically grant accessibility se…

  • High 7.8
    CVE-2022-45639 Public exploit

    OS Command injection vulnerability in sleuthkit fls tool 4.11.1 allows attackers to execute arbitrary commands via a cr…

  • High 7.8
    CVE-2022-20493 Public exploit

    In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. …