Skip to content
OpenAdvisories

Archive

5 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /5 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-4939 Public exploit

    WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation

    THe WCFM Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including 2.10.0, due to a missing capability check on the wp_ajax_nopriv_wcfm_ajax_controller AJAX action that controls membership settings. This makes it p…

    WC Lovers WCFM Membership – WooCommerce Memberships for Multivendor Marketplace Web / CMS
  • Medium 5.3
    CVE-2023-20073 Public exploit Scanner template EPSS 90%

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

    A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insuffic…

    Cisco Cisco Small Business RV Series Router Firmware Network devices
  • Critical 9.8
    CVE-2022-31890 Public exploit

    SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13de…

  • Medium 6.1
    CVE-2022-31889 Public exploit

    Cross Site Scripting (XSS) vulnerability in audit/templates/auditlogs.tmpl.php in osTicket osTicket-plugins before comm…