Skip to content
OpenAdvisories

Archive

1 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /1 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.0
    CVE-2022-4568

    A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.

    Lenovo Lenovo System Update
  • High 8.3
    CVE-2023-0683

    A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API c…

    Lenovo XClarity Controller
  • High 8.8
    CVE-2023-0896

    A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized devic…

    Lenovo Lenovo Smart Clock Essential with Alexa Built In
  • High 7.2
    CVE-2023-30859

    Spigot Command Exploit in Triton

    Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee br…

    tritonmc Triton
  • High 7.8
    CVE-2023-2235

    Use-after-free in Linux kernel's Performance Events subsystem

    A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach function did not check the event's siblings' attach_state before calling add_event_to_groups(), but remo…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-2236

    Use-after-free in Linux kernel's Performance Events subsystem

    A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and its callers call fput in a file in case of an error, causing a reference underflow which leads to a us…

    Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2023-30639

    Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicio…

  • High 7.5
    CVE-2023-30061

    D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.

  • High 7.5
    CVE-2023-30063

    D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.

  • High 8.8
    CVE-2023-22919

    The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could all…

    Zyxel NBG6604 firmware Network devices
  • High 7.5
    CVE-2023-22922

    A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…

    Zyxel NBG-418N v2 firmware Network devices
  • High 7.5
    CVE-2023-22921

    A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could a…

    Zyxel NBG-418N v2 firmware Network devices