Skip to content
OpenAdvisories

Archive

21 March 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5
    CVE-2023-27856 Public exploit EPSS 77%

    Rockwell Automation ThinManager ThinServer Path Traversal Download

    In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker can exploit this vulnerability to download arbitrary files on the disk drive where ThinServer.e…

  • Critical 9.8
    CVE-2023-27855 Public exploit EPSS 13%

    Rockwell Automation ThinManager ThinServer Path Traversal Upload

    In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote attacker could potentially exploit this vulnerability to upload arbitrary files to any directory on the disk dri…

  • High 7.5
    CVE-2023-1545 Public exploit

    SQL Injection in nilsteampassnet/teampass

    SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

  • High 7.5
    CVE-2023-24709 Public exploit EPSS 44%

    An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and …

  • High 8.8
    CVE-2023-27842 Public exploit

    Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execu…