Skip to content
OpenAdvisories

Archive

17 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /17 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Medium 6.5
    CVE-2023-31847

    In davinci 0.3.0-rc after logging in, the user can connect to the mysql malicious server by controlling the data source…

  • High 8.8
    CVE-2023-31701

    TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.

  • High 7.8
    CVE-2023-31722

    There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).

    nasm nasm Debian Ubuntu
  • Medium 5.5
    CVE-2023-31725

    yasm 1.3.0.55.g101bc was discovered to contain a heap-use-after-free via the function expand_mmac_params at yasm/module…

    yasm yasm yasm Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2023-27233

    Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_li…

  • High 7.2
    CVE-2023-2753

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 6.5
    CVE-2023-2756

    SQL Injection in pimcore/customer-data-framework

    SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

    pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  • High 8.8
    CVE-2023-2203

    A flaw was found in the WebKitGTK package. An improper input validation issue may lead to a use-after-free vulnerabilit…

    webkit2gtk Ubuntu
  • High 7.5
    CVE-2023-2295

    A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is …

    libreswan Ubuntu
  • Critical 9.8
    CVE-2023-2319

    It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux…

  • Critical 9.8
    CVE-2023-2780 Scanner template

    Path Traversal: '\..\filename' in mlflow/mlflow

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.

    MLflow mlflow/mlflow mlflow PyPI
  • High 7.2
    CVE-2023-2752

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.0-beta.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.8
    CVE-2023-2491

    A flaw was found in the Emacs text editor. Processing a specially crafted org-mode code with the "org-babel-execute:lat…

  • Medium 5.5
    CVE-2023-2731

    A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file. This flaw al…

    tiff openjpeg2 libtiff Debian Azure Linux
  • Critical 9.8
    CVE-2023-30191

    PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent().

  • Medium 6.1
    CVE-2022-45144

    Algoo Tracim before 4.4.2 allows XSS via HTML file upload.

  • Low 3.3
    CVE-2022-42336

    Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine