Skip to content
OpenAdvisories

Archive

27 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /27 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2023-26493 Public exploit

    Command Injection in Cocos Engine workflow

    Cocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a p…

    cocos cocos-engine
  • High 7.8
    CVE-2023-1665 Public exploit

    Improper Restriction of Excessive Authentication Attempts in linagora/twake

    Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.

    LINAGORA linagora/twake
  • High 7.5
    CVE-2023-20860 Public exploit

    Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch

    Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a securit…

    libspring-java libspring-java org.springframework:spring-webmvc org.springframework:spring Debian Ubuntu Maven