Skip to content
OpenAdvisories

Archive

28 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /28 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28398

    CVE-2023-28398

    Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providi…

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-27394 EPSS 18%

    CVE-2023-27394

    Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView…

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-27886

    CVE-2023-27886

    Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script.

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-28654

    CVE-2023-28654

    Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full access to the web management interface configuration. The user is not visible in Usernames and Passwords menu list of the application and …

    ProPump and Controls Osprey Pump Controller
  • Critical 9.8
    CVE-2023-28326

    Apache OpenMeetings: allows user impersonation

    Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.0.0 before 7.0.0 Description: Attacker can elevate their privileges in any room

    Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  • Critical 9.9
    CVE-2022-3682

    SDM600 file permission validation

    A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This iss…

    Hitachi Energy SDM600 ICS / OT
  • Critical 9.8
    CVE-2023-27232

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy …

  • Critical 9.8
    CVE-2023-27821

    Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.

  • Critical 9.8
    CVE-2023-27231

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw param…

  • Critical 9.8
    CVE-2023-27229

    TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw paramet…

  • Critical 9.8
    CVE-2022-0194

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-46387

    ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which all…

  • Critical 9.8
    CVE-2022-45460 Public exploit

    Multiple Xiongmai NVR devices, including MBD6304T V4.02.R11.00000117.10001.131900.00000 and NBD6808T-PL V4.02.R11.C7431…

  • Critical 9.8
    CVE-2022-23125

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-23122

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2022-23121

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…

    Netatalk Netatalk netatalk netatalk Debian Ubuntu Alpine