Skip to content
OpenAdvisories

Archive

10 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /10 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-32070 Public exploit

    Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers

    XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This h…

    xwiki xwiki-rendering org.xwiki.rendering:xwiki-rendering-syntax-xhtml org.xwiki.platform:xwiki-platform-annotation-core Maven
  • High 7.1
    CVE-2023-30777 Public exploit Scanner template EPSS 39%

    WordPress Advanced Custom Fields / Advanced Custom Fields PRO plugins <= 6.1.5 vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced Custom Fields Pro, WP Engine Advanced Custom Fields plugins <= 6.1.5 versions.

    WP Engine Advanced Custom Fields PRO Advanced Custom Fields
  • High 8.8
    CVE-2023-29930 Public exploit

    An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execut…

  • High 7.5
    CVE-2023-27564 Public exploit

    n8n Information Disclosure vulnerability

    The n8n package 0.218.0 for Node.js allows Information Disclosure.

    n8n npm