Skip to content
OpenAdvisories

Archive

6 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /6 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-32683

    URL deny list bypass via oEmbed and image URLs when generating previews in Synapse

    Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL can bypass the `url_preview_url_blacklist` setting potentially allowing server side request forgery or bypassing network policies. Impact is…

    Matrix synapse matrix-synapse matrix-synapse Ubuntu Alpine PyPI
  • Low 2.6
    CVE-2023-33957

    Denial of service from high number of artifact signatures in notation

    notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures to an artifact can cause denial of service of services on the machine, if a user runs notation inspe…

    notaryproject notation github.com/notaryproject/notation Go
  • Low 3.5
    CVE-2023-3121

    Dahua Smart Parking Management image server-side request forgery

    A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic. This vulnerability affects unknown code of the file /ipms/imageConvert/image. The manipulation of the argument fileUrl leads to server-side request …

    Dahua Smart Parking Management
  • Low 3.5
    CVE-2018-25087

    Arborator Server project.cgi start denial of service

    A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulation of the argument project leads to denial of service. Continious delivery with rolling releases is u…

    Arborator Server
  • Low 3.5
    CVE-2017-20185

    Fuzzy SWMP GET Parameter swmp.php cross site scripting

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Fuzzy SWMP. It has been rated as problematic. This issue affects some unknown processing of the file swmp.php of the component GET Parameter Handler. The manipulation of the argument theme leads to …

    Fuzzy SWMP
  • Low 3.5
    CVE-2015-10117

    Gravity Forms DPS PxPay Plugin cross site scripting

    A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgradin…

  • Low 3.3
    CVE-2023-2961

    A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability.

    advancecomp advancecomp advancecomp Debian Ubuntu Azure Linux