Skip to content
OpenAdvisories

Archive

1 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /1 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • Medium 4.3
    CVE-2022-48309

    A CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versio…

    Sophos Sophos Connect Client Network devices
  • Medium 6.5
    CVE-2022-3162

    Unauthorized read of Custom Resources

    Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the same API group without authorization. Clusters are impacted by this vulnerability if all of the following are true: 1. T…

    Kubernetes Kubernetes kubernetes keda Debian Azure Linux Go
  • Medium 6.6
    CVE-2022-3294 Public exploit

    Node address isn't always verified when proxying

    Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserv…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • Unscored —
    CVE-2022-45608

    An issue was discovered in ThingsBoard 3.4.1, allows low privileged attackers (CUSTOMER_USER) to gain escalated privile…