Skip to content
OpenAdvisories

Archive

10 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /10 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 7.5
    CVE-2023-26464

    Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender

    ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a logging entry involving a specially-crafted (ie, deeply nested) hashmap or hashtable (depending on wh…

    Apache Software Foundation Apache Log4j druid org.apache.logging.log4j:log4j-core Ubuntu Wolfi Maven
  • High 7.5
    CVE-2023-1246

    Files or Directories Accessible to External Parties in Saysis Starcities

    Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collect Data from Common Resource Locations. This issue affects Starcities: through 1.3.

    Saysis Starcities
  • High 7.8
    CVE-2023-22436

    The kernel subsystem function check_permission_for_set_tokenid has an UAF vulnerability.

    The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers can exploit this vulnerability to escalate the privilege to root.

    OpenHarmony OpenHarmony
  • High 8.3
    CVE-2021-27788

    HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability

    HCL Verse is susceptible to a Cross Site Scripting (XSS) vulnerability.  By tricking a user into clicking a crafted URL, a remote unauthenticated attacker could execute script in a victim's web browser to perform operations as the victim and/or steal the vict…

    HCL Software Verse
  • High 7.1
    CVE-2023-1320

    Cross-site Scripting (XSS) - Stored in osticket/osticket

    Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6.

    osTicket osticket/osticket
  • High 8.8
    CVE-2023-1205

    NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 is vulnerable to cross-site request forgery attacks on all endpoints…

  • High 7.2
    CVE-2023-1313

    Unrestricted Upload of File with Dangerous Type in cockpit-hq/cockpit

    Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1.

    cockpit-hq cockpit-hq/cockpit cockpit-hq/cockpit Packagist
  • High 7.5
    CVE-2023-27532 Exploited · Ransomware Public exploit EPSS 81%

    Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database…

    KEV Aug 22, 2023
  • High 7.5
    CVE-2023-27530

    Rack has possible DoS Vulnerability in Multipart MIME parsing

    A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • High 8.8
    CVE-2023-27851

    NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a file sharing mechanism that unintentionally allows users …

  • High 7.5
    CVE-2023-27161

    Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. …

  • High 7.8
    CVE-2023-27117

    WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.

    wabt wabt wabt Debian Ubuntu PyPI
  • High 8.8
    CVE-2023-23328

    A File Upload vulnerability exists in AvantFAX 3.3.7. An authenticated user can bypass PHP file type validation in File…

  • High 7.6
    CVE-2023-26075

    An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, E…