Skip to content
OpenAdvisories

Archive

25 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /25 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.1
    CVE-2022-46907 Public exploit

    Apache JSPWiki: XSS Injection points in several plugins

    A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users…

    Apache Software Foundation Apache JSPWiki org.apache.jspwiki:jspwiki-main org.apache.jspwiki:jspwiki-war Maven
  • Critical 9.8
    CVE-2023-2732 Public exploit Scanner template EPSS 67%

    MStore API <= 3.9.2 - Authentication Bypass

    The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.9.2. This is due to insufficient verification on the user being supplied during the add listing REST API request through the plugin. This makes it p…

    inspireui MStore API – Create Native Android & iOS Apps On The Cloud Android iOS Web / CMS
  • High 7.5
    CVE-2023-31594 Public exploit

    IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.

  • Unscored —
    CVE-2023-2255 Public exploit

    Remote documents loaded without prompt via IFrame

    Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating fram…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu
  • Medium 6.1
    CVE-2023-25439 Public exploit

    Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbit…