Skip to content
OpenAdvisories

Archive

27 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /27 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.3
    CVE-2023-32695

    Insufficient validation when decoding a Socket.IO packet

    socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch…

    socketio socket.io-parser socket.io-parser node-socket.io-parser Debian Ubuntu npm
  • High 7.8
    CVE-2023-26127

    n158 vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function

    All versions of the package n158 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function. **Note:** To execute the code snippet and potentially exploit the vulnerability, the attacker needs to have the ability t…

    n158 npm
  • High 8.4
    CVE-2023-26128

    keep-module-latest vulnerable to Command Injection due to missing input sanitization

    All versions of the package keep-module-latest are vulnerable to Command Injection due to missing input sanitization or other checks and sandboxes being employed to the installModule function. **Note:** To execute the code snippet and potentially exploit the …

    keep-module-latest npm
  • High 8.4
    CVE-2023-26129

    bwm-ng vulnerable to command injection

    All versions of the package bwm-ng are vulnerable to Command Injection due to improper input sanitization in the 'check' function in the bwm-ng.js file. **Note:** To execute the code snippet and potentially exploit the vulnerability, the attacker needs to hav…

    bwm-ng npm
  • High 8.1
    CVE-2023-32686

    kiwitcms vulnerable to stored XSS via unrestricted files upload

    Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potential…

    kiwitcms Kiwi kiwitcms PyPI
  • High 7.5
    CVE-2023-33192

    Improper handling of NTS cookie length that could crash the ntpd-rs server

    ntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the s…

    pendulum-project ntpd-rs ntpd crates.io
  • High 8.1
    CVE-2023-2942

    Improper Input Validation in openemr/openemr

    Improper Input Validation in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr