Skip to content
OpenAdvisories

Archive

24 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /24 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.9
    CVE-2023-27524 Exploited Public exploit Scanner template EPSS 98%

    Apache Superset: Session validation vulnerability when using provided default SECRET_KEY

    Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resour…

    Apache Software Foundation Apache Superset apache-superset PyPI
    KEV Jan 8, 2024
  • High 8.8
    CVE-2023-29849 Public exploit

    Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPric…

  • High 7.5
    CVE-2023-31059 Public exploit Scanner template

    Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstr…

  • High 7.8
    CVE-2023-30533 Public exploit

    Prototype Pollution in sheetJS

    SheetJS Community Edition before 0.19.3 allows Prototype Pollution via a crafted file. In other words. 0.19.2 and earlier are affected, whereas 0.19.3 and later are unaffected.

    xlsx npm