Skip to content
OpenAdvisories

Archive

19 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /19 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-29922 Public exploit Scanner template

    PowerJob vulnerable to Incorrect Access Control via the create user/save interface.

    PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.

    tech.powerjob:powerjob Maven
  • Medium 5.3
    CVE-2023-29923 Public exploit Scanner template

    PowerJob vulnerable to Insecure Permissions

    PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.

    tech.powerjob:powerjob Maven
  • High 7.8
    CVE-2023-21094 Public exploit

    In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due…

    Android
  • High 7.8
    CVE-2023-21086 Public exploit

    In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC …

    Android
  • High 7.8
    CVE-2023-21097 Public exploit

    In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This co…

    Android
  • Critical 10.0
    CVE-2023-22621 Public exploit Scanner template EPSS 71%

    Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin

    Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the serve…

    @strapi/plugin-users-permissions @strapi/plugin-email npm
  • High 7.2
    CVE-2023-22894 Exploited Public exploit

    Strapi leaking sensitive user information by filtering on private fields

    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the …

    @strapi/strapi npm
    KEV Oct 8, 2026
  • Medium 5.5
    CVE-2023-20909 Public exploit

    In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. …

    Android