Skip to content
OpenAdvisories

Archive

12 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /12 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2023-32073 Public exploit

    AVideo command injection vulnerability

    WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-…

    WWBN AVideo wwbn/avideo Packagist
  • Critical 9.8
    CVE-2023-1934 Public exploit

    The PnPSCADA system, a product of SDG Technologies CC, is afflicted by a critical unauthenticated error-based PostgreSQ…

    SDG Technologies PnPSCADA
  • Critical 9.8
    CVE-2023-32243 Public exploit Scanner template EPSS 76%

    WordPress Essential Addons for Elementor Plugin 5.4.0-5.7.1 is vulnerable to Privilege Escalation

    Improper Authentication vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation. This issue affects Essential Addons for Elementor: from 5.4.0 through 5.7.1.

    WPDeveloper Essential Addons for Elementor
  • Medium 6.1
    CVE-2023-29808 Public exploit

    Cross Site Scripting (XSS) vulnerability in vogtmh cmaps (companymaps) 8.0 allows attackers to execute arbitrary code.

  • Critical 9.8
    CVE-2023-29809 Public exploit EPSS 11%

    SQL injection vulnerability found in Maximilian Vogt companymaps (cmaps) v.8.0 allows a remote attacker to execute arbi…

  • Medium 5.4
    CVE-2023-29983 Public exploit

    Cross Site Scripting vulnerability found in Maximilian Vogt cmaps v.8.0 allows a remote attacker to execute arbitrary c…

  • Critical 9.8
    CVE-2023-27823 Public exploit EPSS 54%

    An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid c…

  • Critical 9.8
    CVE-2023-30330 Public exploit

    SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v4…

  • Medium 6.5
    CVE-2023-23169 Public exploit

    Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.

  • Medium 6.8
    CVE-2022-47880 Public exploit

    An Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users w…

  • High 7.5
    CVE-2022-47879 Public exploit

    A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load …