Skip to content
OpenAdvisories

Archive

6 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /6 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-0979

    SQLi in MedDataPACS

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows SQL Injection. This issue affects MedDataPACS : before 2023-03-03.

    MedData MedDataPACS
  • Critical 9.8
    CVE-2022-4328 Scanner template

    WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload

    The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

    Web / CMS
  • Critical 9.8
    CVE-2023-0839

    Improper Error Handling in inSCADA

    Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footprinting. This issue affects inSCADA: before 20230115-1.

    ProMIS Process Co. inSCADA
  • Critical 9.8
    CVE-2023-24776

    Remote code execution in Funadmin

    Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2022-45141

    Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and p…

    samba samba samba samba Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2021-36394 Public exploit

    Moodle Session Fixation vulnerability

    In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2021-36393 Public exploit EPSS 52%

    Moodle SQL Injection vulnerability

    In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Critical 9.8
    CVE-2021-36392

    Moodle SQL Injection vulnerability

    In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

    moodle/moodle moodle Web / CMS Ubuntu Packagist