Skip to content
OpenAdvisories

Archive

28 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /28 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.3
    CVE-2023-30856 Public exploit

    eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution

    eDEX-UI is a science fiction terminal emulator. Versions 2.2.8 and prior are vulnerable to cross-site websocket hijacking. When running eDEX-UI and browsing the web, a malicious website can connect to eDEX's internal terminal control websocket, and send arbit…

    GitSquared edex-ui
  • High 8.8
    CVE-2023-30854 Public exploit

    WWBN AVideo vulnerable to OS Command Injection

    AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.

    WWBN AVideo wwbn/avideo Packagist
  • High 7.2
    CVE-2023-2375 Public exploit

    Ubiquiti EdgeRouter X Web Management command injection

    A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the a…

    Ubiquiti EdgeRouter X Network devices
  • High 8.4
    CVE-2023-28528 Public exploit

    IBM AIX command execution

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.

    IBM AIX