Skip to content
OpenAdvisories

Archive

20 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /20 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • High 8.6
    CVE-2023-32274

    Enphase Installer Toolkit Android App Use of Hard-coded Credentials

    Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.

    Enphase Enphase Installer Toolkit
  • High 8.4
    CVE-2023-2533 Exploited EPSS 29%

    PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

    A Cross-Site Request Forgery (CSRF) vulnerability has been identified in PaperCut NG/MF, which, under specific conditions, could potentially enable an attacker to alter security settings or execute arbitrary code. This could be exploited if the target is an a…

    PaperCut PaperCut NG/MF
    KEV Jul 28, 2025
  • High 7.3
    CVE-2023-3337

    PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication

    A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation lead…

    PuneethReddyHC online-shopping-system-advanced
  • High 7.1
    CVE-2023-35097

    WordPress WP Affiliate Links Plugin <= 0.1.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Internet Marketing Dojo WP Affiliate Links plugin <= 0.1.1 versions.

    Internet Marketing Dojo WP Affiliate Links
  • High 7.1
    CVE-2023-35098

    WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in John Brien WordPress NextGen GalleryView plugin <= 0.5.5 versions.

    John Brien WordPress NextGen GalleryView Web / CMS
  • High 7.3
    CVE-2023-1862

    Remote access to warp-svc.exe in Cloudflare WARP

    Cloudflare WARP client for Windows (up to v2023.3.381.0) allowed a malicious actor to remotely access the warp-svc.exe binary due to an insufficient access control policy on an IPC Named Pipe. This would have enabled an attacker to trigger WARP connect and di…

    Cloudflare WARP Client
  • High 7.1
    CVE-2023-26436

    Attackers with access to the "documentconverterws" API were able to inject serialized Java objects, that were not prope…

    OX Software OX App Suite
  • High 7.1
    CVE-2023-35884

    WordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in EventPrime plugin <= 3.0.5 versions.

    EventPrime EventPrime
  • High 8.1
    CVE-2023-3325

    CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

    The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated…

    thoefter CMS Commander – Manage Multiple Sites Web / CMS
  • High 8.0
    CVE-2020-21366

    Cross Site Request Forgery vulnerability in GreenCMS v.2.3 allows an attacker to gain privileges via the adduser functi…

  • High 8.8
    CVE-2020-21252

    Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and …

  • High 7.5
    CVE-2020-21486

    SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist …

  • High 8.8
    CVE-2020-21325

    An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the funct…

  • High 7.2
    CVE-2020-21400

    SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id…

  • High 7.2
    CVE-2020-20918

    An issue discovered in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary php code via the hidden pa…

  • High 8.8
    CVE-2020-20067

    File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type param…

  • High 7.2
    CVE-2020-20491

    SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via th…

  • High 8.8
    CVE-2020-20726

    GilaCMS Cross Site Request Forgery vulnerability

    Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.

    gilacms/gila Packagist
  • High 7.2
    CVE-2020-20919

    File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sens…

  • High 7.5
    CVE-2020-20636

    SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via t…

  • High 7.2
    CVE-2020-20969 Public exploit

    File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_rest…

  • High 7.5
    CVE-2020-20335

    Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote at…