Skip to content
OpenAdvisories

Archive

20 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /20 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-35166 EPSS 63%

    Privilege escalation (PR) from account through TipsPanel

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It's possible to execute any wiki content with the right of the TipsPanel author by creating a tip UI extension. This has been patched in XWiki 15.1-rc-1 …

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-help-ui Maven
  • Critical 9.8
    CVE-2020-21174

    liufee CMS File Upload vulnerability

    File Upload vulenrability in liufee CMS v.2.0.7.1 allows a remote attacker to execute arbitrary code via the image suffix function.

    feehi/cms Packagist
  • Critical 9.8
    CVE-2020-21489

    Liufee CMS File Upload vulnerability

    File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2Fupdate-self component.

    feehi/cms Packagist
  • Critical 9.8
    CVE-2020-21474

    File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plug…

  • Critical 9.8
    CVE-2020-20413

    SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checkt…

  • Critical 9.8
    CVE-2020-20718

    File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a cr…

  • Critical 9.8
    CVE-2020-20735

    File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.…

  • Critical 9.8
    CVE-2020-20703

    Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand para…

    vim Debian
  • Critical 9.8
    CVE-2023-34541

    Langchain vulnerable to arbitrary code execution

    Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

    langchain PyPI
  • Critical 9.8
    CVE-2023-34563 EPSS 14%

    netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

  • Critical 9.8
    CVE-2023-34600 Public exploit EPSS 24%

    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

    loganalyzer Ubuntu
  • Critical 9.8
    CVE-2023-35885 Public exploit Scanner template EPSS 74%

    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.