Skip to content
OpenAdvisories

Archive

12 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /12 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-32674

    Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.

    HP HP PC Hardware Diagnostics Windows Windows
  • Critical 9.8
    CVE-2023-32673

    Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are pot…

    HP HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware Windows
  • Critical 9.8
    CVE-2023-26295

    Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevatio…

    HP HP Device Manager
  • Critical 9.4
    CVE-2023-1897

    CVE-2023-1897

    Atlas Copco Power Focus 6000 web server does not sanitize the login information stored by the authenticated user’s browser, which could allow an attacker with access to the user’s computer to gain credential information of the controller.

    Atlas Copco Power Focus
  • Critical 9.4
    CVE-2023-1898

    CVE-2023-1898

    Atlas Copco Power Focus 6000 web server uses a small amount of session ID numbers. An attacker could enter a session ID number to retrieve data for an active user’s session.

    Atlas Copco Power Focus
  • Critical 9.4
    CVE-2023-1899

    CVE-2023-1899

    Atlas Copco Power Focus 6000 web server is not a secure connection by default, which could allow an attacker to gain sensitive information by monitoring network traffic between user and controller.

    Atlas Copco Power Focus
  • Critical 10.0
    CVE-2022-36331

    Impersonation attack causing an Authentication Bypass on Western Digital devices

    Western Digital My Cloud, My Cloud Home, My Cloud Home Duo, and SanDisk ibi devices were vulnerable to an impersonation attack that could allow an unauthenticated attacker to gain access to user data. This issue affects My Cloud OS 5 devices: before 5.25.132;…

    Western Digital SanDisk My Cloud OS 5 ibi
  • Critical 9.1
    CVE-2023-35036 EPSS 13%

    In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023…

  • Critical 9.8
    CVE-2023-35042 EPSS 45%

    GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language

    GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable…

    org.geoserver:gs-wms org.geoserver:gs-wfs org.geoserver:gs-wps Maven
  • Critical 9.8
    CVE-2023-27716

    An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated priv…