Skip to content
OpenAdvisories

Archive

12 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /12 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-34212 Public exploit

    Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components

    The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL and library properties that enable deserialization of…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors Maven
  • High 8.8
    CVE-2023-34468 Public exploit EPSS 62%

    Apache NiFi: Potential Code Injection with Database Services using H2

    The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that enables custom code execution. The resolution validates th…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-dbcp-base org.apache.nifi:nifi-hikari-dbcp-service Maven
  • High 7.1
    CVE-2023-32961 Public exploit

    WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Katie Seaborn Zotpress plugin <= 7.3.3 versions.

    Katie Seaborn Zotpress
  • Unscored —
    CVE-2023-34581 Public exploit

    Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms…

  • Unscored —
    CVE-2023-33625 Public exploit EPSS 33%

    D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability v…

  • Unscored —
    CVE-2023-33253 Public exploit

    LabCollector 6.0 though 6.15 allows remote code execution. An authenticated remote low-privileged user can upload an ex…

  • High 7.5
    CVE-2023-30198 Public exploit

    Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/downloa…