Skip to content
OpenAdvisories

Archive

28 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /28 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-36475

    Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

    Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 5.5.2 and 6.2.1, an attacker can use a prototype pollution sink to trigger a remote code execution through the MongoDB BSON parser. A pat…

    parse-community parse-server parse-server npm
  • Critical 9.0
    CVE-2023-2625

    A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment a…

    Hitachi Energy TXpert Hub CoreTec 4 ICS / OT
  • Critical 9.8
    CVE-2023-26134

    git-commit-info vulnerable to Command Injection

    Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to sanitize its parameter commit, which later flows into a sensitive command execution API. As a result, atta…

    git-commit-info npm
  • Critical 9.8
    CVE-2023-32224

    D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

    D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

    D-Link DSL-224 firmware version 3.0.10 Network devices
  • Critical 9.8
    CVE-2023-32222

    D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass

    D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.

    D-Link DSL-G256DG firmware version vBZ_1.00.27 Network devices
  • Critical 9.6
    CVE-2023-20105

    A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communicat…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices
  • Critical 9.6
    CVE-2023-20192

    Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities

    Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administrator-level read-only credentials to elevate their privileges to Administrator with read-write crede…

    Cisco Cisco TelePresence Video Communication Server (VCS) Expressway Network devices