Skip to content
OpenAdvisories

Archive

7 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /7 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-25143

    An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker …

    Trend Micro Trend Micro Apex One
  • Critical 10.0
    CVE-2023-27479

    Improper Neutralization of Directives in Dynamically Evaluated Code in org.xwiki.platform:xwiki-platform-panels-ui

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view rights can execute arbitrary Groovy, Python or Velocity code in XWiki leading to full access to the XWiki installa…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-panels-ui Maven
  • Critical 9.8
    CVE-2023-25690 Public exploit EPSS 84%

    Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

    Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific patter…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2022-3760

    SQLi in Mia-Med

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58.

    MIA Technology Mia-Med
  • Critical 9.3
    CVE-2022-33257

    Time-of-check time-of-use race condition in Core

    Memory corruption in Core due to time-of-check time-of-use race condition during dump collection in trust zone.

    Qualcomm Snapdragon
  • Critical 9.8
    CVE-2022-33256

    Improper validation of array index in Multi-mode call processor

    Memory corruption due to improper validation of array index in Multi-mode call processor.

    Qualcomm Snapdragon
  • Critical 9.3
    CVE-2023-1244

    Cross-site Scripting (XSS) - Stored in answerdev/answer

    Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

    answerdev answerdev/answer github.com/answerdev/answer Go
  • Critical 9.8
    CVE-2023-24781

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24775 Public exploit EPSS 20%

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

    funadmin/funadmin Packagist
  • Critical 9.8
    CVE-2023-24780

    SQL Injection in Funadmin

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.

    funadmin/funadmin Packagist