Skip to content
OpenAdvisories

Archive

8 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /8 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • High 7.3
    CVE-2023-34230

    Snowflake Connector vulnerable to Command Injection

    snowflake-connector-net, the Snowflake Connector for .NET, is vulnerable to command injection prior to version 2.0.18 via SSO URL authentication. In order to exploit the potential for command injection, an attacker would need to be successful in (1) establish…

    snowflakedb snowflake-connector-net Snowflake.Data NuGet
  • High 7.5
    CVE-2023-24535

    Panic when parsing invalid messages in google.golang.org/protobuf

    Parsing invalid messages can panic. Parsing a text-format message which contains a potential number consisting of a minus sign, one or more characters of whitespace, and no further input will cause a panic.

    google.golang.org/protobuf google.golang.org/protobuf/internal/encoding/text google.golang.org/protobuf/encoding/prototext ko Ubuntu Wolfi Go
  • High 7.3
    CVE-2023-34233 Public exploit

    Snowflake Python Connector vulnerable to Command Injection

    The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Versions prior to 3.0.2 are vulnerable to command injection via single sign-on(SSO) browser URL auth…

    snowflakedb snowflake-connector-python snowflake-connector-python PyPI
  • High 7.8
    CVE-2023-29403

    Unsafe behavior in setuid/setgid binaries in runtime

    On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/set…

    Go standard library runtime katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.3
    CVE-2023-34232

    Snowflake NodeJS Driver vulnerable to Command Injection

    snowflake-connector-nodejs, a NodeJS driver for Snowflake, is vulnerable to command injection via single sign on (SSO) browser URL authentication in versions prior to 1.6.21. In order to exploit the potential for command injection, an attacker would need to b…

    snowflakedb snowflake-connector-nodejs snowflake-sdk npm
  • High 8.3
    CVE-2023-0954

    Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras

    A debug feature in Sensormatic Electronics Illustra Pro Gen 4 Dome and PTZ cameras allows a user to compromise credentials after a long period of sustained attack.

    Sensormatic Electronics, a subsidiary of Johnson Controls Illustra Pro Gen 4 PTZ Illustra Pro Gen 4 Dome
  • High 7.3
    CVE-2023-34231

    Snowflake Golang Driver vulnerable to Command Injection

    gosnowflake is th Snowflake Golang driver. Prior to version 1.6.19, a command injection vulnerability exists in the Snowflake Golang driver via single sign-on (SSO) browser URL authentication. In order to exploit the potential for command injection, an attack…

    snowflakedb gosnowflake github.com/snowflakedb/gosnowflake Go
  • High 8.1
    CVE-2023-34962

    Incorrect access control in Chamilo v1.11.x up to v1.11.18 allows a student to arbitrarily access and modify another st…

  • High 7.5
    CVE-2023-33657

    A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_…

  • High 7.5
    CVE-2023-33660

    A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the functio…

  • High 7.5
    CVE-2023-33658

    A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the functio…

  • High 8.8
    CVE-2023-32749 Public exploit EPSS 14%

    Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying …