Skip to content
OpenAdvisories

Archive

24 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /24 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • High 8.8
    CVE-2023-2500

    Go Pricing - WordPress Responsive Pricing Tables <= 3.3.19 - Authenticated (Subscriber+) PHP Object Injection

    The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortcode 'data' parameter. This allows authe…

    Granth Go Pricing - WordPress Responsive Pricing Tables Web / CMS
  • High 8.0
    CVE-2022-4815

    Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

    Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.3, including 8.3.x deserialize untrusted JSON data without constraining the parser to approved classes and methods. 

    Hitachi Vantara Pentaho Business Analytics Server
  • High 8.8
    CVE-2023-2065

    IDOR in Armoli Technology's Cargo Tracking System

    Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking System allows Authentication Abuse, Authentication Bypass. This issue affects Cargo Tracking System: before 3558f28 .

    Armoli Technology Cargo Tracking System
  • High 7.5
    CVE-2023-33980

    Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated a…

  • High 7.6
    CVE-2023-33248

    Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attac…

  • High 7.4
    CVE-2023-33983

    The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of intro…

  • High 8.4
    CVE-2023-1944

    [minikube] ssh server with default password

    This vulnerability enables ssh access to minikube container using a default password.

    Kubernetes Minikube
  • High 7.5
    CVE-2023-31595 Public exploit

    IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.

  • High 7.2
    CVE-2023-31460

    A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could all…

  • High 8.8
    CVE-2023-31459

    A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier cou…

  • High 7.8
    CVE-2023-31748 Public exploit

    Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the ex…

  • High 7.1
    CVE-2023-2859 Public exploit

    Code Injection in nilsteampassnet/teampass

    Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

    nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist
  • High 7.4
    CVE-2023-25599

    A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2, 22.24.1500.0 could allow an un…

  • High 7.1
    CVE-2022-41221

    The client in OpenText Archive Center Administration through 21.2 allows XXE attacks. Authenticated users of the OpenTe…

  • High 7.6
    CVE-2021-25748

    Ingress-nginx `path` sanitization can be bypassed with newline character

    A security issue was discovered in ingress-nginx where a user that can create or update ingress objects can use a newline character to bypass the sanitization of the `spec.rules[].http.paths[].path` field of an Ingress object (in the `networking.k8s.io` or `e…

    Kubernetes Kubernetes ingress-nginx k8s.io/ingress-nginx Go
  • High 7.8
    CVE-2021-25749

    runAsNonRoot logic bypass for Windows containers

    Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

    Kubernetes Kubernetes