Skip to content
OpenAdvisories

Archive

2 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /2 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-30869 Scanner template

    WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation

    Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.

    Easy Digital Downloads Easy Digital Downloads
  • Critical 9.8
    CVE-2023-1730 Scanner template EPSS 41%

    SupportCandy < 3.1.5 - Unauthenticated SQLi

    The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated attackers to perform SQL injection attacks

    Web / CMS
  • Critical 9.8
    CVE-2023-29778 EPSS 16%

    GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.

  • Critical 9.8
    CVE-2023-2479 Scanner template EPSS 22%

    OS Command Injection in appium/appium-desktop

    OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

    appium appium/appium-desktop appium-desktop npm
  • Critical 9.8
    CVE-2023-26089

    European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is use…

  • Critical 9.1
    CVE-2022-47878 Public exploit EPSS 36%

    Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authentic…

  • Critical 9.6
    CVE-2022-47877 Public exploit

    A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary we…

  • Critical 9.1
    CVE-2022-47876 Public exploit

    The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code …