Skip to content
OpenAdvisories

Archive

March 2023

Vulnerabilities first published in this month (UTC), newest first.

← February 2023 2023 / March April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 7.8
    CVE-2023-20963 Exploited Public exploit

    In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional…

    Android
    KEV Apr 13, 2023
  • Critical 9.8
    CVE-2022-42948 Exploited

    Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. By injecting crafte…

    KEV Mar 30, 2023
  • High 8.6
    CVE-2023-26360 Exploited Public exploit Scanner template EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    Adobe ColdFusion
    KEV Mar 15, 2023
  • Critical 9.8
    CVE-2023-26359 Exploited EPSS 17%

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss…

    Adobe ColdFusion
    KEV Aug 21, 2023
  • High 8.8
    CVE-2023-28434 Exploited Public exploit

    MinIO is vulnerable to privilege escalation on Linux/MacOS

    Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attac…

    minio minio minio minio-iamguarded-2025-compat Wolfi Go
    KEV Sep 19, 2023
  • High 7.5
    CVE-2023-28432 Exploited Public exploit Scanner template EPSS 84%

    Minio Information Disclosure in Cluster Deployment

    Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, res…

    minio minio
    KEV Apr 21, 2023
  • High 7.8
    CVE-2023-0386 Exploited Public exploit

    A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities w…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
    KEV Jun 17, 2025
  • Critical 9.8
    CVE-2023-25280 Exploited Scanner template EPSS 98%

    OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a c…

    KEV Sep 30, 2024
  • Critical 9.8
    CVE-2023-28461 Exploited · Ransomware EPSS 68%

    Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the…

    KEV Nov 25, 2024
  • High 8.8
    CVE-2023-1389 Exploited Public exploit Scanner template EPSS 100%

    TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability …

    KEV May 1, 2023
  • Medium 4.4
    CVE-2023-24880 Exploited · Ransomware EPSS 78%

    Windows SmartScreen Security Feature Bypass Vulnerability

    Windows SmartScreen Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Mar 14, 2023
  • Critical 9.8
    CVE-2023-23397 Exploited Public exploit EPSS 97%

    Microsoft Outlook Elevation of Privilege Vulnerability

    Microsoft Outlook Elevation of Privilege Vulnerability

    Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
    KEV Mar 14, 2023
  • High 7.5
    CVE-2023-27532 Exploited · Ransomware Public exploit EPSS 81%

    Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database…

    KEV Aug 22, 2023
  • Medium 6.5
    CVE-2022-41328 Exploited EPSS 11%

    A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet For…

    Fortinet FortiOS Network devices
    KEV Mar 14, 2023
  • High 8.8
    CVE-2019-8720 Exploited

    A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lea…

    qtwebkit-source qtwebkit-opensource-src webkit2gtk webkitgtk Debian Ubuntu Alpine
    KEV May 23, 2022