Skip to content
OpenAdvisories

Archive

29 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /29 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.1
    CVE-2023-35938

    User access not updated with privilege change in Tuleap

    Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. When switching from a project visibility that allows restricted users to `Private without restricted`, restricted users that are project administrators keep…

    Enalean tuleap
  • Medium 4.3
    CVE-2023-30955

    Foundry workspace-server Developer Mode Authorization Bypass

    A security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mod…

    Palantir com.palantir.workspace:workspace
  • Medium 6.3
    CVE-2023-3458

    SourceCodester Shopping Website forgot-password.php sql injection

    A vulnerability was found in SourceCodester Shopping Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file forgot-password.php. The manipulation of the argument contact leads to sql injection. Th…

    SourceCodester Shopping Website
  • Medium 6.3
    CVE-2023-3457

    SourceCodester Shopping Website index.php sql injection

    A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack …

    SourceCodester Shopping Website
  • Medium 4.7
    CVE-2022-23264

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 4.4
    CVE-2023-1602

    The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insu…

    KaizenCoders Short URL Web / CMS
  • Medium 6.3
    CVE-2022-26899

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • Medium 5.3
    CVE-2023-36617

    URI gem has ReDoS vulnerability

    A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser…

    kube-fluentd-operator ruby2.3 ruby2.5 jruby Debian Ubuntu Azure Linux Wolfi RubyGems
  • Medium 6.5
    CVE-2023-37237

    In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shel…