Skip to content
OpenAdvisories

Archive

29 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /29 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28503 Public exploit EPSS 61%

    Authentication bypass in UniRPC's udadmin service

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to byp…

    Rocket Software UniVerse UniData
  • Critical 9.8
    CVE-2023-28502 Public exploit EPSS 60%

    Stack buffer overflow in UniRPC's udadmin_server service

    Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.

    Rocket Software UniData UniVerse
  • Medium 6.5
    CVE-2023-27167 Public exploit

    Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/ab…

  • Medium 5.4
    CVE-2023-26982 Public exploit

    Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter u…

  • High 8.1
    CVE-2023-26984 Public exploit

    An issue in the password reset function of Peppermint v0.2.4 allows attackers to access the emails and passwords of the…

  • Medium 5.4
    CVE-2022-1274 Public exploit

    HTML Injection in Keycloak Admin REST API

    A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.

    org.keycloak:keycloak-services Maven
  • High 8.0
    CVE-2022-27646 Public exploit

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R67…

    NETGEAR R6700v3 Network devices