Skip to content
OpenAdvisories

Archive

25 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /25 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • High 8.0
    CVE-2023-32074

    Nextcloud user_oidc app is missing brute force protection

    user_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2

    Nextcloud security-advisories
  • High 7.5
    CVE-2023-32067

    0-byte UDP payload DoS in c-ares

    c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously i…

    c-ares c-ares nodejs nodejs18 Debian Ubuntu Azure Linux Wolfi
  • High 7.7
    CVE-2023-26215

    TIBCO EBX® Add-ons Path Traversal

    The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIB…

    TIBCO Software TIBCO EBX Add-ons
  • High 7.5
    CVE-2023-2798

    Denial of service in HtmlUnit

    Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may suppor…

    htmlunit org.htmlunit:htmlunit jenkins-htmlunit-core-js Ubuntu Maven
  • High 7.5
    CVE-2023-2480

    Elevation of Privilege in M-Files Desktop Client

    Missing access permissions checks in M-Files Client before 23.5.12598.0 (excluding 23.2 SR2 and newer) allows elevation of privilege via UI extension applications

    M-Files M-Files Client
  • High 7.1
    CVE-2022-45366

    WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jason Crouse, VeronaLabs Slimstat Analytics plugin <= 5.0.4 versions.

    Jason Crouse, VeronaLabs Slimstat Analytics
  • High 8.1
    CVE-2023-2885

    Channel Accessible by Non-Endpoint in CBOT's Chatbot

    Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in CBOT Chatbot allows Adversary in the Middle (AiTM). This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

    CBOT Chatbot
  • High 8.8
    CVE-2023-2883

    IDOR in CBOT's Chatbot

    Authorization Bypass Through User-Controlled Key vulnerability in CBOT Chatbot allows Authentication Abuse, Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

    CBOT Chatbot
  • High 7.8
    CVE-2023-0950

    Array Index UnderFlow in Calc Formula Parsing

    Improper Validation of Array Index vulnerability in the spreadsheet component of The Document Foundation LibreOffice allows an attacker to craft a spreadsheet document that will cause an array index underflow when loaded. In the affected versions of LibreOffi…

    The Document Foundation LibreOffice libreoffice libreoffice Debian Ubuntu
  • High 7.5
    CVE-2023-33355

    IceCMS v1.0.0 has Insecure Permissions. There is unauthorized access to the API, resulting in the disclosure of sensiti…

  • High 7.5
    CVE-2023-33263

    In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the W…

  • High 7.5
    CVE-2023-31861

    ZLMediaKit 4.0 is vulnerable to Directory Traversal.

  • High 7.5
    CVE-2023-31594 Public exploit

    IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.

  • High 7.8
    CVE-2023-27529

    Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vuln…

    Wacom Wacom Tablet Driver installer