Skip to content
OpenAdvisories

Archive

24 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /24 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

86 results · Feed

  • Low 3.5
    CVE-2023-2864

    SourceCodester Online Jewelry Store POST Parameter customer.php cross site scripting

    A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file customer.php of the component POST Parameter Handler. The manipulation of the argument Custid …

    SourceCodester Online Jewelry Store
  • Low 2.3
    CVE-2023-2863

    Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk

    A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a fi…

    Simple Design Daily Journal
  • Low 3.5
    CVE-2023-2862

    SiteServer CMS search cross site scripting

    A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/search. The manipulation of the argument ajaxDivId leads to cross site scripting. It is possible to lau…

    SiteServer CMS SSCMS NuGet
  • Medium 6.7
    CVE-2022-0357

    Improper Quoting Path Issue in Bitdefender Total Security

    Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender …

    Bitdefender Total Security Internet Security Antivirus Plus
  • Critical 10.0
    CVE-2023-1424

    Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules and MELSEC iQ-R Series CPU modules allows a remote unauthenticated attacker to cause a denial of service (Do…

    Mitsubishi Electric MELSEC iQ-F Series FX5U-32MR/DS MELSEC iQ-F Series FX5UC-64MT/DSS MELSEC iQ-F Series FX5U-80MT/ESS ICS / OT
  • Unscored —
    CVE-2023-33789

    A stored cross-site scripting (XSS) vulnerability in the Create Contact Groups (/tenancy/contact-groups/) function of N…

  • Unscored —
    CVE-2023-33797

    A stored cross-site scripting (XSS) vulnerability in the Create Sites (/dcim/sites/) function of Netbox v3.5.1 allows a…

  • Unscored —
    CVE-2023-33790

    A stored cross-site scripting (XSS) vulnerability in the Create Locations (/dcim/locations/) function of Netbox v3.5.1 …

  • High 7.5
    CVE-2023-33980

    Bramble Synchronisation Protocol (BSP) in Briar before 1.4.22 allows attackers to cause a denial of service (repeated a…

  • Unscored —
    CVE-2023-33798

    A stored cross-site scripting (XSS) vulnerability in the Create Rack (/dcim/rack/) function of Netbox v3.5.1 allows att…

  • Unscored —
    CVE-2023-33800

    A stored cross-site scripting (XSS) vulnerability in the Create Regions (/dcim/regions/) function of Netbox v3.5.1 allo…

  • Unscored —
    CVE-2023-33792

    A stored cross-site scripting (XSS) vulnerability in the Create Site Groups (/dcim/site-groups/) function of Netbox v3.…

  • Unscored —
    CVE-2023-33793

    A stored cross-site scripting (XSS) vulnerability in the Create Power Panels (/dcim/power-panels/) function of Netbox v…

  • Critical 9.8
    CVE-2023-33009 Exploited EPSS 28%

    A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
    KEV Jun 5, 2023
  • Critical 9.8
    CVE-2023-33010 Exploited EPSS 29%

    A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…

    Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
    KEV Jun 5, 2023
  • Medium 5.9
    CVE-2023-33982

    Bramble Handshake Protocol (BHP) in Briar before 1.5.3 is not forward secure: eavesdroppers can decrypt network traffic…

  • Unscored —
    CVE-2023-33794

    A stored cross-site scripting (XSS) vulnerability in the Create Tenants (/tenancy/tenants/) function of Netbox v3.5.1 a…

  • High 7.6
    CVE-2023-33248

    Amazon Alexa software version 8960323972 on Echo Dot 2nd generation and 3rd generation devices potentially allows attac…

  • High 7.4
    CVE-2023-33983

    The Introduction Client in Briar through 1.5.3 does not implement out-of-band verification for the public keys of intro…

  • Unscored —
    CVE-2023-33796

    A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, gran…

  • Unscored —
    CVE-2023-33795

    A stored cross-site scripting (XSS) vulnerability in the Create Contact Roles (/tenancy/contact-roles/) function of Net…

  • Medium 6.5
    CVE-2023-33981

    Briar before 1.4.22 allows attackers to spoof other users' messages in a blog, forum, or private group, but each spoofe…

  • Unscored —
    CVE-2023-33787

    A stored cross-site scripting (XSS) vulnerability in the Create Tenant Groups (/tenancy/tenant-groups/) function of Net…

  • Unscored —
    CVE-2023-33785

    A stored cross-site scripting (XSS) vulnerability in the Create Rack Roles (/dcim/rack-roles/) function of Netbox v3.5.…

  • Medium 5.4
    CVE-2023-33829 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows attackers to execut…

  • Unscored —
    CVE-2023-33791

    A stored cross-site scripting (XSS) vulnerability in the Create Provider Accounts (/circuits/provider-accounts/) functi…

  • Unscored —
    CVE-2023-33786

    A stored cross-site scripting (XSS) vulnerability in the Create Circuit Types (/circuits/circuit-types/) function of Ne…

  • Unscored —
    CVE-2023-33788

    A stored cross-site scripting (XSS) vulnerability in the Create Providers (/circuits/providers/) function of Netbox v3.…

  • Unscored —
    CVE-2023-33799

    A stored cross-site scripting (XSS) vulnerability in the Create Contacts (/tenancy/contacts/) function of Netbox v3.5.1…

  • High 8.4
    CVE-2023-1944

    [minikube] ssh server with default password

    This vulnerability enables ssh access to minikube container using a default password.

    Kubernetes Minikube
  • Critical 9.8
    CVE-2023-1174

    [minikube] Network Port exposure in minikube running on macOS using Docker driver

    This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube container.

    Kubernetes Minikube
  • Critical 9.8
    CVE-2023-29721

    SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.

  • Critical 9.8
    CVE-2023-31458

    A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier cou…

  • High 7.5
    CVE-2023-31595 Public exploit

    IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via unauthenticated port access.

  • High 7.2
    CVE-2023-31460

    A vulnerability in the Connect Mobility Router component of MiVoice Connect versions 9.6.2208.101 and earlier could all…

  • Critical 9.8
    CVE-2023-31457

    A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earl…

  • High 8.8
    CVE-2023-31459

    A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect versions 9.6.2208.101 and earlier cou…

  • High 7.8
    CVE-2023-31748 Public exploit

    Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the ex…

  • High 7.1
    CVE-2023-2859 Public exploit

    Code Injection in nilsteampassnet/teampass

    Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.

    nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist
  • Medium 6.1
    CVE-2023-25598

    A vulnerability in the conferencing component of Mitel MiVoice Connect through 19.3 SP2 and 20.x, 21.x, and 22.x throug…