Skip to content
OpenAdvisories

Archive

30 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /30 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-33962 Public exploit

    JStachio XSS vulnerability: Unescaped single quotes

    JStachio is a type-safe Java Mustache templating engine. Prior to version 1.0.1, JStachio fails to escape single quotes `'` in HTML, allowing an attacker to inject malicious code. This vulnerability can be exploited by an attacker to execute arbitrary JavaScr…

    jstachio jstachio io.jstach:jstachio Maven
  • High 8.8
    CVE-2023-33177 Public exploit

    Xibo CMS vulnerable to Remote Code Execution through Zip Slip

    Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outsid…

    Xibo Signage xibo-cms
  • Medium 6.1
    CVE-2023-2023 Public exploit Scanner template

    Custom 404 Pro < 3.7.3 - Reflected Cross-Site Scripting

    The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting.

    Web / CMS
  • Critical 9.8
    CVE-2023-32692 Public exploit

    Remote Code Execution Vulnerability in Validation Placeholders

    CodeIgniter is a PHP full-stack web framework. This vulnerability allows attackers to execute arbitrary code when you use Validation Placeholders. The vulnerability exists in the Validation library, and validation methods in the controller and in-model valida…

    codeigniter4 CodeIgniter4 codeigniter4/framework Packagist
  • Critical 9.8
    CVE-2023-34152 Public exploit

    A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob wi…

    imagemagick imagemagick Debian Ubuntu
  • Medium 6.1
    CVE-2023-23956 Public exploit

    A user can supply malicious HTML and JavaScript code that will be executed in the client browser