Skip to content
OpenAdvisories

Archive

30 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /30 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.2
    CVE-2023-28324 Public exploit EPSS 13%

    A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege e…

    ivanti Ivanti Endpoint Manager Network devices
  • High 7.5
    CVE-2023-30586

    A privilege escalation vulnerability exists in Node.js 20 that allowed loading arbitrary OpenSSL engines when the exper…

    Node.js node nodejs-20 Wolfi
  • High 7.5
    CVE-2023-30589

    llhttp vulnerable to HTTP request smuggling

    The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parse…

    Node.js node openjdk17 nodejs Debian Azure Linux Alpine Wolfi npm
  • High 8.8
    CVE-2021-31982

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

    Microsoft Microsoft Edge (Chromium-based) Browsers
  • High 7.7
    CVE-2023-3493

    Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling

    Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3.

    FOSSBilling fossbilling/fossbilling
  • High 8.0
    CVE-2023-3491

    Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling

    Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3.

    FOSSBilling fossbilling/fossbilling
  • High 7.3
    CVE-2023-26135

    flatnest Prototype Pollution vulnerability

    All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file.

    flatnest npm
  • High 7.5
    CVE-2023-2846

    Authentication Bypass Vulnerability in MELSEC-F Series main module

    Authentication Bypass by Capture-replay vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series main modules allows a remote unauthenticated attacker to cancel the password/keyword setting and login to the affected products by sending specially cr…

    Mitsubishi Electric MELSEC-F Series FX3U-64MS/ES MELSEC-F Series FX3U-32MT/ES MELSEC-F Series FX3U-16MT/DSS ICS / OT
  • High 8.8
    CVE-2023-3063

    SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change

    The SP Project & Document Manager plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.67. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and ac…

    smartypants SP Project & Document Manager Web / CMS
  • High 8.1
    CVE-2023-29241

    Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong config…

    Bosch BIS