Skip to content
OpenAdvisories

Archive

17 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /17 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2023-28116

    Buffer overflow in L2CAP due to misconfigured MTU

    Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a …

    Contiki-NG Contiki-NG
  • High 8.8
    CVE-2023-25069

    TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 th…

    Trend Micro TXOne Networks StellarOne
  • High 7.5
    CVE-2023-27591

    Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics

    Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where the `METRICS_COLLECTOR` configuration option is enabled and `METRICS_ALLOWED_NETWORKS` is set to `127…

    miniflux v2 miniflux.app/v2 miniflux.app Alpine Go
  • High 8.8
    CVE-2023-1471

    WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection

    The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q…

    access-keys WP Popup Banners Web / CMS
  • High 7.2
    CVE-2023-1172

    The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to,…

    ladela WordPress Online Booking and Scheduling Plugin – Bookly Web / CMS
  • High 7.3
    CVE-2023-1464

    SourceCodester Medicine Tracker System improper authentication

    A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?f=save_user. The manipulation of the argument firstname/middlename/lastname/username/password leads …

    SourceCodester Medicine Tracker System
  • High 7.5
    CVE-2023-1444

    Filseclab Twister Antivirus IoControlCode fildds.sys 0x8011206B denial of service

    A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may…

    Filseclab Twister Antivirus
  • High 7.4
    CVE-2021-21548

    Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions be…

    Dell Unisphere for PowerMax, Dell EMC Unisphere for PowerMax Virtual Appliance , PowerMax OS
  • High 7.5
    CVE-2023-24678

    A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a cra…