Skip to content
OpenAdvisories

Archive

24 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /24 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.3
    CVE-2023-2871

    FabulaTech USB for Remote Desktop IoControlCode 0x220408 null pointer dereference

    A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220420/0x22040c/0x220408 of the component IoControlCode Handler. The manipulation leads to null pointer…

    FabulaTech USB for Remote Desktop
  • Low 3.3
    CVE-2023-2870

    EnTech Monitor Asset Manager IoControlCode 0x80002014 denial of service

    A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible t…

    EnTech Monitor Asset Manager
  • Low 2.7
    CVE-2023-33947

    Liferay portal has unauthorized access to object definition via search

    The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in search which allows remote authenticated users in one virtual instance to view object definition from …

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Low 2.7
    CVE-2023-33946

    Liferay portal unauthorized access to objects via OAuth 2 scope

    The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows remote authenticated users in one virtual instance to view objects in a different vi…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Low 3.5
    CVE-2023-2864

    SourceCodester Online Jewelry Store POST Parameter customer.php cross site scripting

    A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid …

    SourceCodester Online Jewelry Store
  • Low 2.3
    CVE-2023-2863

    Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk

    A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a fi…

    Simple Design Daily Journal
  • Low 3.5
    CVE-2023-2862

    SiteServer CMS search cross site scripting

    A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to lau…

    SiteServer CMS SSCMS NuGet