Skip to content
OpenAdvisories

Archive

21 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /21 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2023-3110

    Buffer overflow in S0 Decryption on Unify Gateway

    Description: A vulnerability in SiLabs Unify Gateway 1.3.1 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

    Silicon Labs Unify Gateway
  • Critical 9.6
    CVE-2023-0972

    Buffer overflow in S0 Decryption on Z/IP Gatweay

    Description: A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an unauthenticated attacker within Z-Wave range to overflow a stack buffer, leading to arbitrary code execution.

    Silicon Labs Z/IP Gateway
  • Critical 9.6
    CVE-2023-0971

    Command Authentication Bypass in Z/IP Gateway

    A logic error in SiLabs Z/IP Gateway SDK 7.18.02 and earlier allows authentication to be bypassed, remote administration of Z-Wave controllers, and S0/S2 encryption keys to be recovered.

    Silicon Labs Z/IP Gateway
  • Critical 9.8
    CVE-2023-34340

    Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials

    Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users a…

    Apache Software Foundation Apache Accumulo org.apache.accumulo:accumulo-shell Maven
  • Critical 9.8
    CVE-2023-33584 Public exploit EPSS 14%

    Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to…