Skip to content
OpenAdvisories

Archive

3 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /3 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • Medium 6.1
    CVE-2023-20104

    Cisco Webex App for Web Cross-Site Scripting Vulnerability

    A vulnerability in the file upload functionality of Cisco Webex App for Web could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of…

    Cisco Cisco Webex Teams Network devices
  • Critical 9.8
    CVE-2023-20078 EPSS 10%

    Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of certain Cisco IP Phones could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition. For more information about these vulnerabilities,…

    Cisco Cisco IP Phones with Multiplatform Firmware Network devices
  • Medium 6.5
    CVE-2023-20062

    Cisco Unified Intelligence Center Vulnerabilities

    Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect sensitive information or perform a server-side request forgery (SSRF) attack on an affected system. Cisco plans to release software updates …

    Cisco Cisco Unified Intelligence Center Network devices
  • Medium 5.3
    CVE-2023-20088

    Cisco Finesse Reverse Proxy VPN-less Access to Finesse Desktop Denial of Service Vulnerability

    A vulnerability in the nginx configurations that are provided as part of the VPN-less reverse proxy for Cisco Finesse could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition for new and existing users who are connected th…

    Cisco Cisco Unified Contact Center Enterprise Network devices
  • Medium 6.8
    CVE-2022-4645

    LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-servic…

    LibTIFF LibTIFF tiff tiff Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2022-2837

    coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints

    A flaw was found in coreDNS. This flaw allows a malicious user to redirect traffic intended for external top-level domains (TLD) to a pod they control by creating projects and namespaces that match the TLD.

    juicefs-1.3 juicefs-1.3-compat github.com/coredns/coredns Wolfi Go
  • Medium 4.4
    CVE-2022-2835

    coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints

    A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of <service>.<namespace>.svc.

    juicefs-1.3 juicefs-1.3-compat github.com/coredns/coredns Wolfi Go
  • Critical 9.8
    CVE-2022-46973

    Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.

  • Unscored —
    CVE-2022-45552

    An Insecure Permissions vulnerability in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to…

  • Unscored —
    CVE-2022-45553

    An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary…

  • Critical 9.8
    CVE-2022-45551 EPSS 24%

    An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileg…

  • High 7.8
    CVE-2022-45988 Public exploit

    starsoftcomm CooCare 5.304 allows local attackers to escalate privileges and execute arbitrary commands via a crafted f…

  • Low 3.7
    CVE-2022-41862

    In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos …

    postgresql15 postgresql-12 postgresql-14 postgresql-15 Debian Ubuntu Alpine Wolfi
  • High 7.8
    CVE-2022-47664

    Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse

    libde265 Debian
  • High 7.8
    CVE-2022-47665

    Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)

    libde265 libde265 Debian Ubuntu
  • Unscored —
    CVE-2021-36689

    An issue discovered in com.samourai.wallet.PinEntryActivity.java in Streetside Samourai Wallet 0.99.96i allows attacker…