Skip to content
OpenAdvisories

Archive

29 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /29 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-36468

    Upgrading doesn't prevent exploiting vulnerable XWiki documents

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When an XWiki installation is upgraded and that upgrade contains a fix for a bug in a document, just a new version of that document is added. In some case…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-oldcore Maven
  • Critical 10.0
    CVE-2023-36469 EPSS 82%

    Code injection through NotificationRSSService in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user who can edit their own user profile and notification settings can execute arbitrary script macros including Groovy and Python macros that allow r…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-notifications-ui Maven
  • Critical 10.0
    CVE-2023-36470

    Code injection in icon themes of XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By either creating a new or editing an existing document with an icon set, an attacker can inject XWiki syntax and Velocity code that is executed with pro…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-icon-ui org.xwiki.platform:xwiki-platform-icon-script Maven
  • Critical 9.1
    CVE-2023-36471 Public exploit

    HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

    Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either cr…

    xwiki xwiki-commons org.xwiki.commons:xwiki-commons-xml Maven
  • Critical 10.0
    CVE-2023-33190

    Improperly configured permissions in Sealos

    Sealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluste…

    labring sealos github.com/labring/sealos Go
  • Critical 9.8
    CVE-2023-31222 EPSS 28%

    Medtronic Paceart MSMQ Deserialization of Untrusted Data

    Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing…

    Medtronic Paceart Optima
  • Critical 9.8
    CVE-2023-2982 Public exploit Scanner template EPSS 46%

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login …

    cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Web / CMS