Skip to content
OpenAdvisories

Archive

20 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /20 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

64 results · Feed

  • Medium 6.1
    CVE-2020-20070

    Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via…

  • Medium 6.1
    CVE-2020-20725

    Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via…

  • Critical 9.8
    CVE-2020-20413

    SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checkt…

  • High 8.8
    CVE-2020-20067

    File upload vulnerability in ebCMS v.1.1.0 allows a remote attacker to execute arbitrary code via the upload type param…

  • Critical 9.8
    CVE-2020-20718

    File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a cr…

  • High 7.2
    CVE-2020-20491

    SQL injection vulnerability in OpenCart v.2.2.00 thru 3.0.3.2 allows a remote attacker to execute arbitrary code via th…

  • Critical 9.8
    CVE-2020-20735

    File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.…

  • High 8.8
    CVE-2020-20726

    GilaCMS Cross Site Request Forgery vulnerability

    Cross Site Request Forgery vulnerability in Gila GilaCMS v.1.11.4 allows a remote attacker to execute arbitrary code via the cm/update_rows/user parameter.

    gilacms/gila Packagist
  • Critical 9.8
    CVE-2020-20703

    Buffer Overflow vulnerability in VIM v.8.1.2135 allows a remote attacker to execute arbitrary code via the operand para…

    vim Debian
  • High 7.2
    CVE-2020-20919

    File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sens…

  • High 7.5
    CVE-2020-20636

    SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via t…

  • High 7.2
    CVE-2020-20969 Public exploit

    File Upload vulnerability in PluckCMS v.4.7.10 allows a remote attacker to execute arbitrary code via the trashcan_rest…

  • Medium 4.8
    CVE-2020-20697

    NodCMS Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter.

    khodakhah/nodcms Packagist
  • High 7.5
    CVE-2020-20335

    Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote at…

  • Medium 6.5
    CVE-2020-20502

    Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check …

  • Critical 9.8
    CVE-2023-34541

    Langchain vulnerable to arbitrary code execution

    Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.

    langchain PyPI
  • Critical 9.8
    CVE-2023-34563 EPSS 14%

    netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

  • Medium 6.5
    CVE-2023-34597

    A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service (DoS) via a crafted…

  • Medium 6.5
    CVE-2023-34596

    A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service (DoS) via a craft…

  • Critical 9.8
    CVE-2023-34600 Public exploit EPSS 24%

    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

    loganalyzer Ubuntu
  • Medium 6.1
    CVE-2023-33495

    Craft CMS vulnerable to HTML injection

    Craft CMS through 4.4.9 is vulnerable to HTML Injection.

    craftcms/cms Packagist
  • Critical 9.8
    CVE-2023-35885 Public exploit Scanner template EPSS 74%

    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

  • Unscored —
    CVE-2023-35854 Public exploit

    Zoho ManageEngine ADSelfService Plus through 6113 has an authentication bypass that can be exploited to steal the domai…

  • Medium 5.5
    CVE-2023-3220

    An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu Azure Linux