Skip to content
OpenAdvisories

Archive

21 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /21 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High —
    GHSA-5wrg-8fxp-cx9r

    passport-wsfed-saml2 Signature Bypass vulnerability

    ## Information Please note that this is not a new disclosure, and is previously reported in our [SECURITY-NOTICE.md](https://github.com/auth0/passport-wsfed-saml2/commit/520b9fc0bb4249ce83bec47e30153419f086ab70 ) which we removed in favor of github advisory. …

    passport-wsfed-saml2 npm
  • High 7.1
    CVE-2023-0970

    Serial API Buffer Overflow in Z/IP Gateway

    Multiple buffer overflow vulnerabilities in SiLabs Z/IP Gateway SDK version 7.18.01 and earlier allow an attacker with invasive physical access to a Z-Wave controller device to overwrite global memory and potentially execute arbitrary code.

    Silicon Labs Z/IP Gateway
  • High 7.5
    CVE-2023-2911

    Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0

    If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a st…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2023-2829

    Malformed NSEC records can cause named to terminate unexpectedly when synth-from-dnssec is enabled

    A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue a…

    ISC BIND 9 bind Azure Linux
  • High 7.5
    CVE-2023-2828

    named's configured cache size limit can be significantly exceeded

    Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size`…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2023-27414

    WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Popup Box Team Popup box plugin <= 3.4.4 versions.

    Popup Box Team Popup box
  • High 7.1
    CVE-2023-27432

    WordPress Manage Upload Limit Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WpSimpleTools Manage Upload Limit plugin <= 1.0.4 versions.

    WpSimpleTools Manage Upload Limit
  • High 7.1
    CVE-2023-27450

    WordPress Leyka Plugin <= 3.29.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa of social technologies Leyka plugin <= 3.29.2 versions.

    Teplitsa of social technologies Leyka
  • High 8.8
    CVE-2022-3372

    Cross-Site Request Forgery (CSRF) in Riello UPS Netman-204

    There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker…

    Riello UPS NetMan 204
  • High 7.5
    CVE-2023-34981

    Apache Tomcat: AJP response header mix-up

    A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8, 9.0.74 and 8.5.88 meant that, if a response did not include any HTTP headers no AJP SEND_HEADERS messare woudl be sent for the response which in turn meant that at least one AJP proxy (…

    Apache Software Foundation Apache Tomcat tomcat10 org.apache.tomcat.embed:tomcat-embed-core Debian Maven
  • High 7.5
    CVE-2023-0026

    2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

    An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When a BGP update message is received over …

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • High 7.5
    CVE-2023-33289

    The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.r…

  • High 7.2
    CVE-2023-24261 EPSS 19%

    A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code…

  • High 7.5
    CVE-2023-27243

    An access control issue in Makves DCAP v3.0.0.122 allows unauthenticated attackers to obtain cleartext credentials via …

  • High 8.8
    CVE-2022-45287

    An access control issue in Registration.aspx of Temenos CWX 8.5.6 allows authenticated attackers to escalate privileges…