Skip to content
OpenAdvisories

Archive

19 May 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 7.2

    Remote Code Execution via unrestricted file extension in Craft CMS

    Craft CMS is an open source content management system. In affected versions of Craft CMS an unrestricted file extension may lead to Remote Code Execution. If the name parameter value is not empty string('') in the View.php's doesTemplateExist() -> resolveTemp…

  • High 7.5

    Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module

    Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 **** and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to i…

  • High 7.8

    Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.5…

  • High 7.5

    Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/down…

  • High 8.1

    Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may override oth…

  • High 7.5
    CVE-2022-30114 Public exploit

    A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0…