Skip to content
OpenAdvisories

Archive

7 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /7 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

185 results · Feed

  • High 8.8
    CVE-2023-33498

    alist Incorrect Access Control vulnerability

    alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.

    github.com/alist-org/alist/v3 Go
  • High 8.1
    CVE-2023-33537

    TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a buffer overflow via the comp…

  • Critical 9.1
    CVE-2023-33604

    Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /s…

  • Unscored —
    CVE-2023-33595

    CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unico…

  • Critical 9.8
    CVE-2023-33556

    TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw par…

  • High 7.8
    CVE-2023-33865

    RenderDoc before 1.27 allows local privilege escalation via a symlink attack. It relies on the /tmp/RenderDoc directory…

    renderdoc renderdoc Debian Ubuntu
  • Low 3.1
    CVE-2023-1825

    Insertion of Sensitive Information Into Sent Data in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. It was possible to disclose issue notes to an unauthorized user…

    GitLab GitLab Web / CMS
  • Critical 9.1
    CVE-2023-31114

    An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer…

  • High 7.5
    CVE-2023-31115

    An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer…

  • Critical 9.8
    CVE-2023-31116

    An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permis…

  • Low 3.8
    CVE-2023-3142

    Cross-site Scripting (XSS) - Stored in microweber/microweber

    Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

    microweber microweber/microweber microweber/microweber Packagist
  • Medium 4.3
    CVE-2023-2001

    An issue has been discovered in GitLab CE/EE affecting all versions before 15.10.8, all versions starting from 15.11 be…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.4
    CVE-2023-2015

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.8 before 15.10.8, all versions sta…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.9
    CVE-2023-2589

    An issue has been discovered in GitLab EE affecting all versions starting from 12.0 before 15.10.8, all versions starti…

    GitLab GitLab Web / CMS
  • High 8.7
    CVE-2023-2442 EPSS 96%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions st…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Unscored —
    CVE-2023-2530

    A privilege escalation allowing remote code execution was discovered in the orchestration service.

    Puppet Puppet Enterprise
  • Medium 4.4
    CVE-2023-2485

    Incorrect Privilege Assignment in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. A malicious maintainer in a project can escalate other users…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.5
    CVE-2023-2199

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.0 before 15.10.8, all versions sta…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 2.6
    CVE-2023-2013

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.5
    CVE-2023-2198

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.7 before 15.10.8, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Critical 9.8
    CVE-2023-30400

    An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18. A command injection vulnerability in the network…

  • Medium 5.5
    CVE-2022-31693

    VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the …

  • Unscored —
    CVE-2022-25834

    In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could…

    percona-xtrabackup Ubuntu
  • Unscored —
    CVE-2021-33223

    An issue discovered in SeedDMS 6.0.15 allows an attacker to escalate privileges via the userid and role parameters in t…

  • Unscored —
    CVE-2021-46889

    The 10Web Photo Gallery plugin through 1.5.69 for WordPress allows XSS via theme_id for bwg_frontend_data. NOTE: other …