Skip to content
OpenAdvisories

Archive

8 May 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.2
    CVE-2023-2114 Public exploit EPSS 45%

    NEX-Forms < 8.4 - Admin+ SQL Injection

    The NEX-Forms WordPress plugin before 8.4 does not properly escape the `table` parameter, which is populated with user input, before concatenating it to an SQL query.

  • High 7.8
    CVE-2023-32233 Public exploit EPSS 13%

    In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused…

  • Critical 9.8
    CVE-2023-30092 Public exploit

    SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.

  • Critical 9.8
    CVE-2023-30185 Public exploit

    CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\Syste…