Skip to content
OpenAdvisories

Archive

21 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /21 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Low 3.5
    CVE-2023-2826

    SourceCodester Class Scheduling System POST Parameter search_teacher_result.php cross site scripting

    A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument…

    SourceCodester Class Scheduling System
  • Medium 6.7
    CVE-2020-36694

    An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet proce…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Medium 6.5
    CVE-2023-33254

    There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured …

  • Medium 4.7
    CVE-2023-33251

    When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary f…

  • Medium 4.4
    CVE-2023-33250

    The Linux kernel 6.3 has a use-after-free in iopt_unmap_iova_range in drivers/iommu/iommufd/io_pagetable.c.

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 7.5
    CVE-2023-33252

    Double spend in snarkjs

    iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less than the field modulus.

    snarkjs npm
  • Unscored —
    CVE-2021-46888

    Stored XSS in hledger-web

    An issue was discovered in hledger before 1.23. A Stored Cross-Site Scripting (XSS) vulnerability exists in toBloodhoundJson that allows an attacker to execute JavaScript by encoding user-controlled values in a payload with base64 and parsing them with the at…

    hledger-web Hackage