Skip to content
OpenAdvisories

Archive

1 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /1 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-33963

    DataEase data source has deserialization vulnerability

    DataEase is an open source data visualization and analysis tool. Prior to version 1.18.7, a deserialization vulnerability exists in the DataEase datasource, which can be exploited to execute arbitrary code. The vulnerability has been fixed in v1.18.7. There a…

    dataease dataease
  • Critical 9.7
    CVE-2023-33965

    Brook's tproxy server is vulnerable to a drive-by command injection.

    Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remot…

    txthinking brook github.com/txthinking/brook Go
  • Critical 9.9
    CVE-2023-22647

    Rancher vulnerable to Privilege Escalation via manipulation of Secrets

    An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulate Kubernetes secrets in the local cluster, resulting in the secret being deleted, but their read-level permissions to the …

    SUSE Rancher github.com/rancher/rancher Go
  • Critical 9.8
    CVE-2022-4333

    Sprecher: Sprecon maintenance access with hardcoded credentials

    Hardcoded Credentials in multiple SPRECON-E CPU variants of Sprecher Automation allows an remote attacker to take over the device. These accounts should be deactivated according to Sprecher's hardening guidelines.

    Sprecher Automation SPRECON-E CPU PU244x SPRECON-E CPU SPRECON-EDIR SPRECON-E CPU PU243x
  • Critical 9.8
    CVE-2023-33778

    Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmw…

  • Critical 9.1
    CVE-2023-29722

    The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to m…

  • Critical 9.8
    CVE-2023-29736

    Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to …

  • Critical 9.8
    CVE-2023-23952

    Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vu…