Skip to content
OpenAdvisories

Archive

8 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /8 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-29401 Public exploit

    Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin

    The filename parameter of the Context.FileAttachment function is not properly sanitized. A maliciously crafted filename can cause the Content-Disposition header to be sent with an unexpected filename value or otherwise modify the Content-Disposition header. F…

    github.com/gin-gonic/gin github.com/gin-gonic/gin github.com/gin-gonic/gin golang-github-gin-gonic-gin Debian Ubuntu Go
  • High 7.3
    CVE-2023-34233 Public exploit

    Snowflake Python Connector vulnerable to Command Injection

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL auth…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • Medium 6.5
    CVE-2023-34096 Public exploit EPSS 63%

    Thruk has Path Traversal Vulnerability in panorama.pm

    Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file `panorama.pm` is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a fi…

    sni Thruk
  • Low 3.5
    CVE-2023-3163 Public exploit

    y_project RuoYi filterKeyword resource consumption

    A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of the argument value leads to resource consumption. VDB-231090 is the identifier assigned to this vulner…

    y_project RuoYi com.ruoyi:ruoyi Maven
  • Critical 9.8
    CVE-2023-2986 Public exploit EPSS 43%

    Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

    The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the p…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS
  • Medium 6.5
    CVE-2023-32750 Public exploit

    Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which…

  • Medium 5.4
    CVE-2023-32751 Public exploit

    Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are gener…

  • High 8.8
    CVE-2023-32749 Public exploit EPSS 14%

    Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying …