Skip to content
OpenAdvisories

Archive

18 May 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28753 Public exploit

    netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could…

  • Critical 10.0
    CVE-2023-2024 Public exploit

    Improper Authentication for OpenBlue Enterprise Manager Data Collector

    Improper authentication in OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 allow access to an unauthorized user under certain circumstances.

  • High 7.1
    CVE-2023-30868 Public exploit Scanner template

    WordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 versions.

  • Medium 6.5
    CVE-2023-20110 Public exploit

    Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based m…

  • High 7.2
    CVE-2019-25137 Public exploit

    Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:…