Skip to content
OpenAdvisories

Archive

March 2023

Vulnerabilities first published in this month (UTC), newest first.

8 results · Clear filters · Feed

  • High 7.8
    CVE-2023-20963 Exploited Public exploit

    In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional…

    KEV Apr 13, 2023
  • High 8.6
    CVE-2023-26360 Exploited Public exploit Scanner template EPSS 97%

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Improper Access Control vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does n…

    KEV Mar 15, 2023
  • High 8.8
    CVE-2023-28434 Exploited Public exploit

    MinIO is vulnerable to privilege escalation on Linux/MacOS

    Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name checking and put an object into any bucket while processing `PostPolicyBucket`. To carry out this attac…

    KEV Sep 19, 2023
  • High 7.5
    CVE-2023-28432 Exploited Public exploit Scanner template EPSS 84%

    Minio Information Disclosure in Cluster Deployment

    Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including `MINIO_SECRET_KEY` and `MINIO_ROOT_PASSWORD`, res…

    KEV Apr 21, 2023
  • High 7.8
    CVE-2023-0386 Exploited Public exploit

    A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities w…

    KEV Jun 17, 2025
  • High 8.8
    CVE-2023-1389 Exploited Public exploit Scanner template EPSS 100%

    TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability …

    KEV May 1, 2023
  • Critical 9.8
    CVE-2023-23397 Exploited Public exploit EPSS 97%

    Microsoft Outlook Elevation of Privilege Vulnerability

    Microsoft Outlook Elevation of Privilege Vulnerability

    KEV Mar 14, 2023
  • High 7.5
    CVE-2023-27532 Exploited · Ransomware Public exploit EPSS 81%

    Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database…

    KEV Aug 22, 2023