Skip to content
OpenAdvisories

Archive

24 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /24 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.4
    CVE-2023-2868 Exploited Public exploit EPSS 87%

    Remote Code injection in Barracuda Email Security Gateway

    A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar f…

    Barracuda Networks Barracuda Email Security Gateway
    KEV May 26, 2023
  • Medium 4.3
    CVE-2022-47447 Public exploit

    WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <= 3.3.8 versions.

    Mathieu Chartier WordPress WP-Advanced-Search Web / CMS
  • Critical 9.8
    CVE-2023-33246 Exploited Public exploit Scanner template EPSS 97%

    Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

    For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attack…

    Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-namesrv org.apache.rocketmq:rocketmq-broker Maven
    KEV Sep 6, 2023
  • Medium 5.4
    CVE-2023-33829 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execut…

  • High 7.5
    CVE-2023-31595 Public exploit

    IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.

  • High 7.8
    CVE-2023-31748 Public exploit

    Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the ex…

  • High 7.1
    CVE-2023-2859 Public exploit

    Code Injection in nilsteampassnet/teampass

    Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

    nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist