Skip to content
OpenAdvisories

Archive

1 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /1 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-46365

    Apache StreamPark (incubating): Logic error causing any account reset

    Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, …

    Apache Software Foundation Apache StreamPark (incubating) org.apache.streampark:streampark Maven
  • Critical 9.8
    CVE-2022-45802

    Apache StreamPark (incubating): Upload any file to any directory

    Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to …

    Apache Software Foundation Apache StreamPark (incubating) org.apache.streampark:streampark-common_2.11 org.apache.streampark:streampark-common_2.12 Maven
  • Critical —
    GHSA-83fm-w79m-64r5

    Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs

    ### Impact Users of the MLflow Open Source Project who are hosting the MLflow Model Registry using the ``mlflow server`` or ``mlflow ui`` commands using an MLflow version older than **MLflow 2.3.1** may be vulnerable to a remote file access exploit if they ar…

    mlflow PyPI
  • Critical 9.8
    CVE-2023-29635

    File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the fil…

  • Critical 9.8
    CVE-2022-35898

    OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation. This allow…