Skip to content
OpenAdvisories

Archive

15 May 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-32314 Public exploit

    Sandbox Escape

    vm2 is a sandbox that can run untrusted code with Node's built-in modules. A sandbox escape vulnerability exists in vm2 for versions up to and including 3.9.17. It abuses an unexpected creation of a host object based on the specification of `Proxy`. As a resu…

  • Critical 9.8
    CVE-2023-1698 Public exploit Scanner template EPSS 82%

    WAGO: WBM Command Injection in multiple products

    In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.