Skip to content
OpenAdvisories

Archive

16 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /16 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low —
    GHSA-68jh-rf6x-836f

    @apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces

    ### Context Content Security Policies (CSP) are a defense-in-depth strategy against XSS attacks. Improper application of CSP isn't itself a vulnerability, but it does fail to prevent XSS in the event that there is a viable attack vector for an XSS attack. ###…

    @apollo/server npm
  • Low 3.1
    CVE-2023-2797

    Path traversal in GitHub plugin's code preview feature

    Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a channel.

    Mattermost Mattermost Github Plugin
  • Low 3.4
    CVE-2023-2431

    Bypass of seccomp profile enforcement

    A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • Low 3.8
    CVE-2023-25185

    An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault…