Skip to content
OpenAdvisories

Archive

22 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /22 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

112 results · Feed

  • High 7.5
    CVE-2023-35133

    Moodle: ssrf risk due to insufficient check on the curl blocked hosts

    An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 8.1
    CVE-2023-28094

    Pega platform clients who are using versions 7.4 through 8.8.x and have upgraded from a version prior to 8.x may be uti…

    Pega Systems Pega Platform
  • Critical 9.8
    CVE-2023-32571 Public exploit EPSS 35%

    Dynamic Linq vulnerable to remote code execution

    Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

    System.Linq.Dynamic.Core NuGet
  • Critical 9.8
    CVE-2023-29931

    laravel-s vulnerable to Local File Inclusion

    laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.

    hhxsv5/laravel-s Packagist
  • Unscored —
    CVE-2023-29707

    Cross Site Scripting (XSS) vulnerability in GBCOM LAC WEB Control Center version lac-1.3.x, allows attackers to create …

  • High 7.5
    CVE-2023-29709

    An issue was discovered in /cgi-bin/login_rj.cgi in Wildix WSG24POE version 103SP7D190822, allows attackers to bypass a…

  • Unscored —
    CVE-2023-29708 EPSS 14%

    An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factor…

  • Critical 9.8
    CVE-2023-29711 EPSS 70%

    An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbit…

  • Unscored —
    CVE-2023-36239

    libming listswf 0.4.7 was discovered to contain a buffer overflow in the parseSWF_DEFINEFONTINFO() function at parser.c.

    ming Ubuntu
  • Unscored —
    CVE-2023-36363

    An issue in the __nss_database_lookup component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a De…

  • Unscored —
    CVE-2023-36368

    An issue in the cs_bind_ubat component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of S…

  • Unscored —
    CVE-2023-36354

    TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR740N V1/V2, TL-WR940N V2/V3, and TL-WR941ND V5/V6 were discovered to conta…

  • Unscored —
    CVE-2023-36357

    An issue in the /userRpm/LocalManageControlRpm component of TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8/V10, and TL-WR941N…

  • High 7.5
    CVE-2023-36359

    TP-Link TL-WR940N V4, TL-WR841N V8/V10, TL-WR940N V2/V3 and TL-WR941ND V5/V6 were discovered to contain a buffer overfl…

  • Unscored —
    CVE-2023-36367

    An issue in the BLOBcmp component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Servic…

  • Unscored —
    CVE-2023-36371

    An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Servic…

  • High 7.7
    CVE-2023-36358

    TP-Link TL-WR940N V2/V3/V4, TL-WR941ND V5/V6, TL-WR743ND V1 and TL-WR841N V8 were discovered to contain a buffer overfl…

  • Unscored —
    CVE-2023-36362

    An issue in the rel_sequences component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of …

  • Unscored —
    CVE-2023-36093

    There is a storage type cross site scripting (XSS) vulnerability in the filing number of the Basic Information tab on t…

  • Unscored —
    CVE-2023-36370

    An issue in the gc_col component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service…

  • Unscored —
    CVE-2023-36365

    An issue in the sql_trans_copy_key component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denia…

  • Unscored —
    CVE-2023-36366

    An issue in the log_create_delta component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause Denial of…

  • Unscored —
    CVE-2023-36243

    FLVMeta v1.2.1 was discovered to contain a buffer overflow via the xml_on_metadata_tag_only function at dump_xml.c.

    flvmeta flvmeta Debian Ubuntu
  • Unscored —
    CVE-2023-36356

    TP-Link TL-WR940N V2/V4/V6, TL-WR841N V8, TL-WR941ND V5, and TL-WR740N V1/V2 were discovered to contain a buffer read o…

  • Critical 9.8
    CVE-2023-36097

    fuadmin vulnerable to insecure file upload

    funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.

    funadmin/funadmin Packagist
  • Unscored —
    CVE-2023-36355 Public exploit EPSS 32%

    TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6Cf…

  • Unscored —
    CVE-2023-36369

    An issue in the list_append component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Se…

  • Unscored —
    CVE-2023-36364

    An issue in the rel_deps component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Servi…

  • Unscored —
    CVE-2023-31867

    Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.

  • Unscored —
    CVE-2023-31868

    Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web application are dynamic…

  • Unscored —
    CVE-2023-27083

    An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code…

  • Unscored —
    CVE-2023-30347 Public exploit

    Cross Site Scripting (XSS) vulnerability in Neox Contact Center 2.3.9, via the serach_sms_api_name parameter to the SMA…