Skip to content
OpenAdvisories

Archive

12 April 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.5
    CVE-2023-1874 Public exploit

    WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation

    The WP Data Access plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.3.7. This is due to a lack of authorization checks on the multiple_roles_update function. This makes it possible for authenticated attackers, wit…

  • High 7.8
    CVE-2023-1829 Public exploit

    Use-after-free in tcindex (traffic control index filter) in the Linux Kernel

    A use-after-free vulnerability in the Linux Kernel traffic control index filter (tcindex) can be exploited to achieve local privilege escalation. The tcindex_delete function which does not properly deactivate filters in case of a perfect hashes while deleting…

  • High 8.8
    CVE-2023-27216 Public exploit

    An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the ne…

  • High 8.8
    CVE-2023-27826 Public exploit EPSS 12%

    SeowonIntech SWC 5100W WIMAX Bootloader 1.18.19.0, HW 0.0.7.0, and FW 1.11.0.1, 1.9.9.4 are vulnerable to OS Command In…

  • High 7.2
    CVE-2023-26852 Public exploit

    An arbitrary file upload vulnerability in the upload plugin of Textpattern v4.8.8 and below allows attackers to execute…