Skip to content
OpenAdvisories

Archive

20 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /20 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-33869 Public exploit

    Enphase Envoy OS Command Injection

    Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

    Enphase Envoy
  • Medium 5.3
    CVE-2023-1999 Public exploit

    Use after free in libwebp

    There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encode…

    Chromium libwebp thunderbird mozjs38 Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2023-3320 Public exploit

    The WP Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…

    musilda WP Sticky Social Web / CMS
  • High 7.2
    CVE-2020-20969 Public exploit

    File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_rest…

  • Critical 9.8
    CVE-2023-34600 Public exploit EPSS 24%

    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

    loganalyzer Ubuntu
  • Critical 9.8
    CVE-2023-35885 Public exploit Scanner template EPSS 74%

    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

  • Unscored —
    CVE-2023-35854 Public exploit

    Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domai…