Skip to content
OpenAdvisories

Archive

21 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /21 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium —
    GHSA-wfg4-322g-9vqv

    memoffset allows reading uninitialized memory

    memoffset allows attempt of reading data from address `0` with arbitrary type. This behavior is an undefined behavior because address `0` to `std::mem::size_of<T>` may not have valid bit-pattern with `T`. Old implementation dereferences uninitialized memory o…

    memoffset crates.io
  • Medium 5.9
    CVE-2023-27429

    WordPress Jetpack CRM Plugin <= 5.4.4 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Automattic - Jetpack CRM team Jetpack CRM plugin <= 5.4.4 versions.

    Automattic - Jetpack CRM team Jetpack CRM
  • Medium 5.9
    CVE-2023-27439

    WordPress New Adman Plugin <= 1.6.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gl_SPICE New Adman plugin <= 1.6.8 versions.

    gl_SPICE New Adman
  • Medium 6.5
    CVE-2023-27443

    WordPress Simple Vimeo Shortcode Plugin <= 2.9.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Grant Kimball Simple Vimeo Shortcode plugin <= 2.9.1 versions.

    Grant Kimball Simple Vimeo Shortcode
  • Medium 6.3
    CVE-2023-3339

    code-projects Agro-School Management System exam-delete.php sql injection

    A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file exam-delete.php. The manipulation of the argument test_id leads to sql injecti…

    code-projects Agro-School Management System
  • Medium 5.3
    CVE-2022-25883

    semver vulnerable to Regular Expression Denial of Service

    Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

    nodejs js-jquery nodejs18 nodejs-nodemon Debian Ubuntu Azure Linux npm
  • Medium 6.1
    CVE-2023-33405 Public exploit Scanner template EPSS 31%

    Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

  • Medium 6.1
    CVE-2023-33591

    User Registration & Login and User Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulner…

  • Medium 6.1
    CVE-2023-33725

    Broadleaf vulnerable to Cross-site Scripting

    Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.

    org.broadleafcommerce:broadleaf Maven
  • Medium 5.5
    CVE-2023-25435

    libtiff 4.5.0 is vulnerable to Buffer Overflow via extractContigSamplesShifted8bits() at /libtiff/tools/tiffcrop.c:3753.

    tiff tiff libtiff Debian Ubuntu Azure Linux