Skip to content
OpenAdvisories

Archive

25 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /25 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.7
    CVE-2023-0045 Public exploit

    Incorrect indirect branch prediction barrier in the Linux Kernel

    The current implementation of the prctl syscall does not issue an IBPB immediately during the syscall. The ib_prctl_set  function updates the Thread Information Flags (TIFs) for the task and updates the SPEC_CTRL MSR on the function __speculation_ctrl_update,…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.0
    CVE-2023-29007 Public exploit

    Arbitrary configuration injection via `git submodule deinit`

    Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit…

    git git git git Debian Ubuntu Alpine Wolfi
  • Critical 10.0
    CVE-2023-30839 Public exploit

    PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"

    PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 cont…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.8
    CVE-2023-28771 Exploited Public exploit EPSS 99%

    Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware ver…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
    KEV May 31, 2023
  • High 8.8
    CVE-2023-20872 Public exploit

    VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.