Skip to content
OpenAdvisories

Archive

30 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /30 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-28323

    A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user t…

    ivanti Ivanti Endpoint Manager Network devices
  • Critical 10.0
    CVE-2023-22814

    Authentication Bypass issue in My Cloud OS 5 devices

    An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202.

    Western Digital My Cloud OS 5
  • Critical 9.8
    CVE-2023-36812 Public exploit EPSS 17%

    Remote Code Execution in OpenTSDB

    OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. Th…

    OpenTSDB OpenTSDB net.opentsdb:opentsdb Maven
  • Critical 9.8
    CVE-2023-3490

    SQL Injection in fossbilling/fossbilling

    SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3.

    FOSSBilling fossbilling/fossbilling
  • Critical 9.1
    CVE-2023-36477

    Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages in the `CKEditor' space. This makes it possible to perform a variety of harmful actions, such as removing tec…

    xwiki xwiki-platform org.xwiki.contrib:application-ckeditor-ui org.xwiki.platform:xwiki-platform-ckeditor-ui Maven
  • Critical 9.8
    CVE-2023-3249

    Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass

    The Web3 – Crypto wallet Login & NFT token gating plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.6.0. This is due to incorrect authentication checking in the 'hidden_form_data' function. This makes it possible …

    cyberlord92 Web3 – Crypto wallet Login & NFT token gating Web / CMS
  • Critical 9.8
    CVE-2023-2834

    BookIt <= 2.3.7 - Authentication Bypass

    The BookIt plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.3.7. This is due to insufficient verification on the user being supplied during booking an appointment through the plugin. This makes it possible for un…

    stellarwp Bookit — Booking & Appointment Calendar Web / CMS
  • Critical 9.8
    CVE-2023-31543

    pipreqs vulnerable to Dependency Confusion

    A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.

    pipreqs PyPI