Skip to content
OpenAdvisories

Archive

8 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /8 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-29405

    Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

    The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo …

    Go toolchain cmd/go cmd/cgo katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Critical 9.8
    CVE-2023-29404

    Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

    The go command may execute arbitrary code at build time when using cgo. This may occur when running "go get" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a "#cgo …

    Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Critical 9.8
    CVE-2023-29402

    Code injection via go command with cgo in cmd/go

    The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted module which contains directories with newline characters in th…

    Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Critical 9.8
    CVE-2023-2986 Public exploit EPSS 43%

    Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

    The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the p…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-34566

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/sa…

  • Critical 9.8
    CVE-2023-33443

    Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attack…