Skip to content
OpenAdvisories

Archive

13 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /13 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

24 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-32015

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2023-32014

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2023-29363

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Critical 9.8
    CVE-2023-29357 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Microsoft Microsoft SharePoint Server 2019
    KEV Jan 10, 2024
  • Critical 9.9
    CVE-2022-43684

    ACL bypass in Reporting functionality

    ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix…

    ServiceNow Now Platform
  • Critical 9.8
    CVE-2023-34249

    benjjvi/PyBB may send unsanitized request to SQL database

    benjjvi/PyBB is an open source bulletin board. Prior to commit dcaeccd37198ecd3e41ea766d1099354b60d69c2, benjjvi/PyBB is vulnerable to SQL Injection. This vulnerability has been fixed as of commit dcaeccd37198ecd3e41ea766d1099354b60d69c2. As a workaround, a u…

    benjjvi PyBB
  • Critical 9.8
    CVE-2023-35064

    SQLi in Satos Mobile

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607.

    Satos Satos Mobile
  • Critical 9.8
    CVE-2023-3050

    Authentication Bypass in TMT's Lockcell

    Reliance on Cookies without Validation and Integrity Checking in a Security Decision vulnerability in TMT Lockcell allows Privilege Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

    TMT Lockcell
  • Critical 9.8
    CVE-2023-3049

    File Upload in TMT's Lockcell

    Unrestricted Upload of File with Dangerous Type vulnerability in TMT Lockcell allows Command Injection. This issue affects Lockcell: before 15.

    TMT Lockcell
  • Critical 9.8
    CVE-2023-3048

    IDOR in TMT's Lockcell

    Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15.

    TMT Lockcell
  • Critical 9.8
    CVE-2023-3047 Public exploit

    SQLi in TMT's Lockcell

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15.

    TMT Lockcell
  • Critical 9.2
    CVE-2023-27997 Exploited · Ransomware Public exploit EPSS 87%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, vers…

    Fortinet FortiOS FortiProxy FortiOS-6K7K Network devices
    KEV Jun 13, 2023
  • Critical 9.1
    CVE-2023-29129

    A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.3 < V1.18.0), Mendix SA…

    Siemens Mendix SAML (Mendix 8 compatible) Mendix SAML (Mendix 7 compatible) Mendix SAML (Mendix 9.6 compatible, New Track) ICS / OT
  • Critical 10.0
    CVE-2023-25910

    A vulnerability has been identified in SIMATIC PCS 7 (All versions < V9.1 SP2 UC04), SIMATIC S7-PM (All versions < V5.7…

    Siemens SIMATIC STEP 7 V5 SIMATIC PCS 7 SIMATIC S7-PM ICS / OT
  • Critical 9.8
    CVE-2023-2278

    WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action

    The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9 via the 'wdk_public_action' function. This allows unauthenticated attackers to include and execute arbitrary files on the server, allowing …

    Wp Directory Kit WP Directory Kit Web / CMS
  • Critical 9.8
    CVE-2023-29562

    TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/loca…

  • Critical 9.8
    CVE-2023-31541 Public exploit

    A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.…

  • Critical 9.1
    CVE-2023-24470

    Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.

  • Critical 9.8
    CVE-2023-27836

    TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the device…

  • Critical 9.8
    CVE-2023-27837

    TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key pa…

  • Critical 9.8
    CVE-2023-30764

    OS command injection vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an a…

    KbDevice,Inc. KB-AHR series and KB-IRIP series
  • Critical 9.8
    CVE-2023-30762

    Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, a…

    KbDevice,Inc. KB-AHR series and KB-IRIP series
  • Critical 9.8
    CVE-2023-30766

    Hidden functionality issue exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary…

    KbDevice,Inc. KB-AHR series and KB-IRIP series
  • Critical 9.8
    CVE-2022-28550

    Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strin…

    jhead jhead Debian Ubuntu