Skip to content
OpenAdvisories

Archive

29 May 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • High 8.8
    CVE-2023-30253 Public exploit EPSS 82%

    Dolibarr vulnerable to remote code execution via uppercase manipulation

    Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data.

  • Unscored —
    CVE-2022-24630 Public exploit EPSS 24%

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. BrowseFiles.php allows a ?cmd=ssh…

  • Critical 9.8
    CVE-2022-24627 Public exploit Scanner template EPSS 26%

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is an unauthenticated SQL inje…

  • Critical 9.8
    CVE-2022-24629 Public exploit EPSS 37%

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achi…

  • Unscored —
    CVE-2022-24632 Public exploit EPSS 27%

    An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is directory traversal during …

  • High 7.5
    CVE-2021-27825 Public exploit

    A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-stat…