Skip to content
OpenAdvisories

Archive

26 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /26 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.6
    CVE-2023-32315 Exploited Public exploit Scanner template EPSS 100%

    Openfire administration console authentication bypass

    Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to us…

    igniterealtime Openfire org.igniterealtime.openfire:xmppserver openfire Alpine Maven
    KEV Aug 24, 2023
  • High 7.1
    CVE-2023-32311 Public exploit

    The CloudExplorer Lite missing permissions check

    CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has bee…

    CloudExplorer-Dev CloudExplorer-Lite
  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI
  • High 7.2
    CVE-2023-33440 Public exploit Scanner template EPSS 15%

    Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_…

  • Critical 10.0
    CVE-2023-2825 Public exploit Scanner template EPSS 72%

    An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Unscored —
    CVE-2023-2002 Public exploit

    A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2023-30145 Public exploit EPSS 46%

    Server-Side Template Injection in Camaleon CMS

    Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.

    camaleon_cms RubyGems
  • Critical 9.1
    CVE-2022-46945 Public exploit

    Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/Nag…

    nagvis nagvis Debian Ubuntu