Skip to content
OpenAdvisories

Archive

27 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /27 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Unscored —
    CVE-2023-2068 Public exploit EPSS 40%

    File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

    The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the …

    Web / CMS
  • Unscored —
    CVE-2023-2877 Public exploit EPSS 22%

    Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

    The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-ons. This allows a user with a role as low as Subscriber to install and activate arbitrary plugins of …

    Web / CMS
  • Unscored —
    CVE-2023-2744 Public exploit

    WP ERP < 1.12.4 - Admin+ SQL Injection

    The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as…

    Web / CMS
  • Unscored —
    CVE-2023-34839 Public exploit

    A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain pri…

  • Unscored —
    CVE-2023-34838 Public exploit

    A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remo…

  • Unscored —
    CVE-2023-34836 Public exploit

    A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remo…

  • Unscored —
    CVE-2023-34837 Public exploit

    A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remo…

  • Unscored —
    CVE-2023-34830 Public exploit

    i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout paramete…

  • Unscored —
    CVE-2023-34835 Public exploit

    A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remo…