Skip to content
OpenAdvisories

Archive

26 May 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.6
    CVE-2023-32315 Exploited Public exploit Scanner template EPSS 100%

    Openfire administration console authentication bypass

    Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to us…

    KEV Aug 24, 2023
  • High 7.1
    CVE-2023-32311 Public exploit

    The CloudExplorer Lite missing permissions check

    CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has bee…

  • High 7.2
    CVE-2023-33440 Public exploit Scanner template EPSS 15%

    Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code execution via /eval/ajax.php?action=save_…