Skip to content
OpenAdvisories

Archive

22 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /22 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.4
    CVE-2023-3128 Public exploit

    Grafana vulnerable to Authentication Bypass by Spoofing

    Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

    Grafana Grafana Grafana Enterprise grafana Web / CMS Ubuntu Go
  • Critical 9.8
    CVE-2023-2611

    Advantech R-SeeNet Use of Hard-coded Credentials

    Advantech R-SeeNet versions 2.4.22 is installed with a hidden root-level user that is not available in the users list. This hidden user has a password that cannot be changed by users.

    Advantech R-SeeNet
  • Critical 9.8
    CVE-2023-32571 Public exploit EPSS 35%

    Dynamic Linq vulnerable to remote code execution

    Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

    System.Linq.Dynamic.Core NuGet
  • Critical 9.8
    CVE-2023-29931

    laravel-s vulnerable to Local File Inclusion

    laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.

    hhxsv5/laravel-s Packagist
  • Critical 9.8
    CVE-2023-29711 EPSS 70%

    An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbit…

  • Critical 9.8
    CVE-2023-36097

    fuadmin vulnerable to insecure file upload

    funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

    funadmin/funadmin Packagist