Skip to content
OpenAdvisories

Archive

6 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /6 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2023-33977 Public exploit

    Stored cross site scripting (XSS) via unrestricted file upload in Kiwi TCMS

    Kiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potential…

    kiwitcms Kiwi kiwitcms PyPI
  • High 8.8
    CVE-2023-2833 Public exploit EPSS 17%

    ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_screen_options' function. This makes it possible for authenticated attackers, with minimal permissio…

    ReviewX ReviewX – Multi-Criteria Reviews for WooCommerce with Google Reviews & Schema Web / CMS
  • High 7.2
    CVE-2023-33381 Public exploit EPSS 22%

    A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware ve…

  • Medium 6.5
    CVE-2023-33477 Public exploit

    In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special p…

  • High 7.8
    CVE-2023-33747 Public exploit

    CloudPanel v2.2.2 allows attackers to execute a path traversal.

  • High 7.5
    CVE-2023-31606 Public exploit

    RedCloth Regular Expression Denial of Service issue

    A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

    ruby-redcloth RedCloth ruby-redcloth Debian Ubuntu RubyGems
  • High 7.8
    CVE-2023-2603 Public exploit

    A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer over…

    libcap2 libcap2 libcap libcap Debian Ubuntu Azure Linux Alpine