Skip to content
OpenAdvisories

Archive

21 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /21 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-27855 Public exploit EPSS 13%

    Rockwell Automation ThinManager ThinServer Path Traversal Upload

    In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk dri…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Critical 9.8
    CVE-2023-1529

    Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-37337

    A command execution vulnerability exists in the access control functionality of Netgear Orbi Router RBR750 4.6.8.5. A s…

    NETGEAR Orbi Router RBR750 Network devices
  • Critical 9.9
    CVE-2023-27874

    IBM Aspera Faspex XML external entity injection

    IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands. IBM X-Force ID: 249845.

    IBM Aspera Faspex
  • Critical 9.8
    CVE-2023-1153

    SQLi in Pacsrapor

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Pacsrapor allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Pacsrapor: before 1.22.

    Pacsrapor Pacsrapor
  • Critical 9.1
    CVE-2023-28725 EPSS 21%

    General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote a…

  • Critical 9.8
    CVE-2023-27569

    The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.

  • Critical 9.8
    CVE-2023-27570

    The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.

  • Critical 9.8
    CVE-2022-45637

    An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via in…