Skip to content
OpenAdvisories

Archive

10 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /10 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.8
    CVE-2023-0157 Public exploit EPSS 32%

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Stored XSS

    The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing an authorized user (admin+) to plant bogus log files containing malicious JavaScript code that will b…

    Web / CMS
  • Medium 4.9
    CVE-2023-0156 Public exploit EPSS 20%

    All-In-One Security (AIOS) < 5.1.5 - Admin+ Arbitrary File/Folder Access via Traversal

    The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admin+) to view the contents of arbitrary files and list directories anywhere on the server (to which th…

    Web / CMS
  • High 8.8
    CVE-2023-28205 Exploited Public exploit EPSS 27%

    A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 …

    Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
    KEV Apr 10, 2023
  • High 8.6
    CVE-2023-28206 Exploited Public exploit EPSS 23%

    An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5…

    Apple macOS iOS and iPadOS macOS iOS
    KEV Apr 10, 2023
  • Critical 9.8
    CVE-2023-26068 Public exploit EPSS 12%

    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

  • High 8.1
    CVE-2023-26067 Public exploit Scanner template EPSS 38%

    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).