Skip to content
OpenAdvisories

Archive

18 May 2023

Vulnerabilities first published on this day (UTC), newest first.

20 results · Clear filters · Feed

  • High 7.5

    A use-after-free in BigIntPrimitive addition in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could h…

  • High 7.5

    A null pointer dereference bug in Hermes prior to commit 5cae9f72975cf0e5a62b27fdd8b01f103e198708 could have been used …

  • High 7.5

    There is a vulnerability in the fizz library prior to v2023.01.30.00 where a CHECK failure can be triggered remotely. T…

  • High 7.8

    Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acro…

  • High 7.3

    Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Wind…

  • High 7.1

    WordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThimPress LearnPress Export Import plugin <= 4.0.2 versions.

  • High 7.1
    CVE-2023-30868 Public exploit Scanner template

    WordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 versions.

  • High 7.4

    Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2. This could lead to Cross-Site Scripting due to insufficient input s…

  • High 7.8

    sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists …

  • High 7.8

    OpenText Documentum Content Server before 23.2 has a flaw that allows for privilege escalation from a non-privileged Do…

  • High 8.6
    CVE-2023-20160 EPSS 11%

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6
    CVE-2023-20161 EPSS 11%

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6
    CVE-2023-20189 EPSS 12%

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6
    CVE-2023-20159 EPSS 11%

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 8.6

    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

    Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected…

  • High 7.2
    CVE-2019-25137 Public exploit

    Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:…