Skip to content
OpenAdvisories

Archive

27 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /27 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-2928 Public exploit EPSS 51%

    DedeCMS article_allowurl_edit.php code injection

    A vulnerability was found in DedeCMS up to 5.7.106. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file uploads/dede/article_allowurl_edit.php. The manipulation of the argument allurls leads to code injecti…

  • Medium 6.3
    CVE-2023-2927

    JIZHICMS TemplateController.php index server-side request forgery

    A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the atta…

  • Medium 5.4
    CVE-2023-2926

    SeaCMS Picture Upload member.php denial of service

    A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack m…

  • Medium 4.7
    CVE-2023-2924 EPSS 24%

    Supcon SimField reportupload.aspx unrestricted upload

    A vulnerability, which was classified as critical, has been found in Supcon SimField up to 1.80.00.00. Affected by this issue is some unknown functionality of the file /admin/reportupload.aspx. The manipulation of the argument files[] leads to unrestricted up…

    Supcon SimField
  • Medium 6.3
    CVE-2023-2923

    Tenda AC6 fromDhcpListClient stack-based overflow

    A vulnerability classified as critical was found in Tenda AC6 US_AC6V1.0BR_V15.03.05.19. Affected by this vulnerability is the function fromDhcpListClient. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit…

    Tenda AC6
  • Medium 5.0
    CVE-2023-33195

    Craft CMS XSS in RSS widget feed

    Craft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.

    craftcms cms craftcms/cms Packagist
  • Medium 6.3
    CVE-2023-33188

    Uncontrolled data used in content resolution

    Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attach…

    federicoiosue Omni-Notes
  • Medium 4.9
    CVE-2023-32688

    Invalid push request payload crashes Parse Server

    parse-server-push-adapter is the official Push Notification adapter for Parse Server. The Parse Server Push Adapter can crash Parse Server due to an invalid push notification payload. This issue has been patched in version 4.1.3.

    parse-community parse-server-push-adapter parse-server-push-adapter npm
  • Medium 4.7
    CVE-2023-2947 EPSS 90%

    Cross-site Scripting (XSS) - Stored in openemr/openemr

    Cross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 6.3
    CVE-2023-2946

    Improper Access Control in openemr/openemr

    Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 4.3
    CVE-2023-2945

    Missing Authorization in openemr/openemr

    Missing Authorization in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 4.6
    CVE-2023-2943

    Code Injection in openemr/openemr

    Code Injection in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr
  • Medium 6.3
    CVE-2023-2944

    Improper Access Control in openemr/openemr

    Improper Access Control in GitHub repository openemr/openemr prior to 7.0.1.

    Open-Emr openemr/openemr