Skip to content
OpenAdvisories

Archive

30 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /30 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.7
    CVE-2023-32684

    In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file

    Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk image could read a single file on the host filesystem, even when no filesystem is mounted from the host…

    lima-vm lima github.com/lima-vm/lima Go
  • Low 3.5
    CVE-2023-2981

    Abstrium Pydio Cells Chat cross site scripting

    A vulnerability, which was classified as problematic, has been found in Abstrium Pydio Cells 4.2.0. This issue affects some unknown processing of the component Chat. The manipulation leads to basic cross site scripting. The attack may be initiated remotely. T…

    Abstrium Pydio Cells github.com/pydio/cells github.com/pydio/cells/v4 Go
  • Low 2.4
    CVE-2023-2973

    SourceCodester Students Online Internship Timesheet Syste cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_company. The manipulation of the argu…

    SourceCodester Students Online Internship Timesheet Syste
  • Low 2.7
    CVE-2023-2117

    Image Optimizer by 10web < 1.0.27 - Admin+ Path Traversal

    The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high privileged users such as admins to inspect names of files and directories outside of the sites root.

    Web / CMS
  • Low 3.5
    CVE-2023-2970

    MindSpore json_helper.cc UpdateArray memory corruption

    A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the file mindspore/ccsrc/minddata/dataset/util/json_helper.cc. The manipulation leads to memory corrupti…

    mindspore PyPI
  • Low 2.6
    CVE-2023-33183

    Error in calendar when booking an appointment reveals the full path of the website

    Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3

    Nextcloud security-advisories
  • Low 3.3
    CVE-2023-28351

    An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with …

  • Low 3.3
    CVE-2022-39074

    There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the…