Skip to content
OpenAdvisories

Archive

25 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /25 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

10 results · Feed

  • Medium 6.3
    CVE-2023-3396

    Campcodes Retro Cellphone Online Store index.php sql injection

    A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username/password leads to sql…

    Campcodes Retro Cellphone Online Store
  • Unscored —
    CVE-2015-20109

    end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-de…

    glibc eglibc Debian Ubuntu
  • High 7.5
    CVE-2023-36661 Public exploit

    Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyI…

    xmltooling xmltooling Debian Ubuntu
  • Unscored —
    CVE-2023-36663

    it-novum openITCOCKPIT (aka open IT COCKPIT) 4.6.4 before 4.6.5 allows SQL Injection (by authenticated users) via the s…

  • Unscored —
    CVE-2023-36612

    Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an…

  • Unscored —
    CVE-2023-36632

    The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum…

    python-py Azure Linux
  • Unscored —
    CVE-2023-36664 Public exploit

    Artifex Ghostscript before 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | p…

    ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  • Unscored —
    CVE-2023-36660

    The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.

  • Unscored —
    CVE-2023-36630

    In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.

  • Unscored —
    CVE-2023-36666

    INEX IXP-Manager before 6.3.1 allows XSS. list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, pa…