Skip to content
OpenAdvisories

Archive

20 June 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-33869 Public exploit

    Enphase Envoy OS Command Injection

    Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

  • Medium 5.3
    CVE-2023-1999 Public exploit

    Use after free in libwebp

    There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encode…

  • Medium 6.1
    CVE-2023-3320 Public exploit

    The WP Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…