Skip to content
OpenAdvisories

Archive

23 May 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.8
    CVE-2023-32697 Public exploit

    Sqlite-jdbc vulnerable to remote code execution when JDBC url is attacker controlled

    SQLite JDBC is a library for accessing and creating SQLite database files in Java. Sqlite-jdbc addresses a remote code execution vulnerability via JDBC URL. This issue impacting versions 3.6.14.1 through 3.41.2.1 and has been fixed in version 3.41.2.2.

  • High 7.2
    CVE-2023-33617 Public exploit

    An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/a…

  • Critical 9.8
    CVE-2023-33362 Public exploit

    Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.

  • Critical 9.8
    CVE-2023-29919 Public exploit Scanner template EPSS 60%

    SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because …

  • High 7.8
    CVE-2023-31747 Public exploit

    Wondershare Filmora 12 (Build 12.2.1.2088) was discovered to contain an unquoted service path vulnerability via the com…

  • Medium 6.1
    CVE-2023-31664 Public exploit

    A reflected cross-site scripting (XSS) vulnerability in /authenticationendpoint/login.do of WSO2 API Manager before 4.2…

  • Medium 5.4
    CVE-2023-25440 Public exploit

    Stored Cross Site Scripting (XSS) vulnerability in the add contact function CiviCRM 5.59.alpha1, allows attackers to ex…