Skip to content
OpenAdvisories

Archive

27 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /27 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2023-26493 Public exploit

    Command Injection in Cocos Engine workflow

    Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a p…

    cocos cocos-engine
  • Medium 4.6
    CVE-2022-48429 Public exploit

    In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

    JetBrains Hub
  • Critical 9.8
    CVE-2023-1133 Public exploit EPSS 50%

    CVE-2023-1133

    Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on port 10100/ UDP by default. The service accepts the unverified UDP packets and deserializes the content, which could allow…

    Delta Electronics InfraSuite Device Master ICS / OT
  • Unscored —
    CVE-2023-0179 Public exploit

    A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the le…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-1665 Public exploit

    Improper Restriction of Excessive Authentication Attempts in linagora/twake

    Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.

    LINAGORA linagora/twake
  • Unscored —
    CVE-2023-25263 Public exploit

    In Stimulsoft Designer (Desktop) 2023.1.5, and 2023.1.4, once an attacker decompiles the Stimulsoft.report.dll the atta…

  • Unscored —
    CVE-2023-25261 Public exploit

    Certain Stimulsoft GmbH products are affected by: Remote Code Execution. This affects Stimulsoft Designer (Desktop) 202…

  • High 7.5
    CVE-2023-20860 Public exploit

    Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch

    Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a securit…

    libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring Debian Ubuntu Maven
  • Medium 6.5
    CVE-2022-32199 Public exploit

    db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory trave…