Skip to content
OpenAdvisories

Archive

1 June 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2023-32707 Public exploit EPSS 79%

    ‘edit_user’ Capability Privilege Escalation

    In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admi…

  • High 7.8
    CVE-2023-34312 Public exploit

    In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate po…

  • High 7.8
    CVE-2023-2598 Public exploit

    A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the …