Skip to content
OpenAdvisories

Archive

11 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /11 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Critical 9.9
    CVE-2023-25911

    Authenticated OS Command Injection in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

    Danfoss AK-EM100
  • Critical 9.0
    CVE-2023-22582

    Reflected Cross-Site Scripting in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.

    Danfoss AK-EM100
  • Critical 10.0
    CVE-2023-22583

    SQL Injection in Danfoss AK-EM100

    The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.

    Danfoss AK-EM100
  • Medium 5.3
    CVE-2023-25912

    Webreport disclosure to unauthorized actor in Danfoss AK-EM100

    The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

    Danfoss AK-EM100
  • High 7.7
    CVE-2023-22586

    Local File Inclusion in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.

    Danfoss AK-EM100
  • High 7.5
    CVE-2023-22584

    Cleartext credentials in Danfoss AK-EM100

    The Danfoss AK-EM100 stores login credentials in cleartext.

    Danfoss AK-EM100
  • Critical 9.0
    CVE-2023-22585

    Reflected Cross-Site Scripting in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.

    Danfoss AK-EM100
  • Medium 4.2
    CVE-2023-3192

    Session Fixation in froxlor/froxlor

    Session Fixation in GitHub repository froxlor/froxlor prior to 2.1.0.

    froxlor froxlor/froxlor froxlor/froxlor Packagist