Skip to content
OpenAdvisories

Archive

22 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /22 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2023-28434 Exploited Public exploit

    MinIO is vulnerable to privilege escalation on Linux/MacOS

    Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attac…

    minio minio minio minio-iamguarded-2025-compat Wolfi Go
    KEV Sep 19, 2023
  • High 7.5
    CVE-2023-28432 Exploited Public exploit Scanner template EPSS 84%

    Minio Information Disclosure in Cluster Deployment

    Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, res…

    minio minio
    KEV Apr 21, 2023
  • High 7.5
    CVE-2023-0464 Public exploit

    Excessive Resource Usage Verifying X.509 Policy Constraints

    A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate …

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.8
    CVE-2023-1281 Public exploit

    UAF in Linux kernel's tcindex (traffic control index filter) implementation

    Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while packets are traversing, which will cause a use-after-free when 'tcf_exts_exec()' is called with the d…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-0386 Exploited Public exploit

    A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities w…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 17, 2025
  • Critical 9.8
    CVE-2023-27100 Public exploit

    Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v2…

  • Medium 6.1
    CVE-2022-45004 Public exploit

    Gophish vulnerable to Cross-site Scripting via crafted landing page

    Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

    github.com/gophish/gophish Go
  • High 7.5
    CVE-2022-45003 Public exploit

    Gophish vulnerable to Denial of Service via crafted payload involving autofocus

    Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.

    github.com/gophish/gophish Go