Skip to content
OpenAdvisories

Archive

28 February 2023

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • High 7.8
    CVE-2023-0461 Public exploit

    Use-after-free vulnerability in the Linux Kernel

    There is a use-after-free vulnerability in the Linux Kernel which can be exploited to achieve local privilege escalation. To reach the vulnerability kernel configuration flag CONFIG_TLS or CONFIG_XFRM_ESPINTCP has to be configured, but the operation does not …

  • Critical 9.8
    CVE-2023-27372 Public exploit Scanner template EPSS 100%

    SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. …

  • High 7.5
    CVE-2023-26255 Public exploit Scanner template EPSS 47%

    An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before …

  • High 7.5
    CVE-2023-26256 Public exploit Scanner template EPSS 12%

    An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before …

  • High 7.8
    CVE-2023-20943 Public exploit

    In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a pat…

  • High 8.1
    CVE-2023-20938 Public exploit

    In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. …

  • High 7.8
    CVE-2023-20933 Public exploit

    In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could l…

  • High 7.8
    CVE-2023-20944 Public exploit

    In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization.…

  • High 7.5
    CVE-2022-47075 Public exploit Scanner template EPSS 59%

    An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via th…

  • High 7.5
    CVE-2022-47076 Public exploit

    An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via Displa…