Skip to content
OpenAdvisories

Archive

June 2023

Vulnerabilities first published in this month (UTC), newest first.

← May 2023 2023 / June July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-36812 Public exploit EPSS 17%

    Remote Code Execution in OpenTSDB

    OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability by writing user-controlled input to Gnuplot configuration file and running Gnuplot with the generated configuration. Th…

    OpenTSDB OpenTSDB net.opentsdb:opentsdb Maven
  • Critical 9.1
    CVE-2023-36471 Public exploit

    HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml

    Xwiki commons is the common modules used by other XWiki top level projects. The HTML sanitizer that is included in XWiki since version 14.6RC1 allowed form and input HTML tags. In the context of XWiki, this allows an attacker without script right to either cr…

    xwiki xwiki-commons org.xwiki.commons:xwiki-commons-xml Maven
  • Critical 9.8
    CVE-2023-2982 Public exploit Scanner template EPSS 46%

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 7.6.4. This is due to insufficient encryption on the user being supplied during a login …

    cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Web / CMS
  • Critical 9.8
    CVE-2023-30258 Public exploit Scanner template EPSS 94%

    Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary co…

  • Critical 9.4
    CVE-2023-3128 Public exploit

    Grafana vulnerable to Authentication Bypass by Spoofing

    Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

    Grafana Grafana Grafana Enterprise grafana Web / CMS Ubuntu Go
  • Critical 9.8
    CVE-2023-32571 Public exploit EPSS 35%

    Dynamic Linq vulnerable to remote code execution

    Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods including Where, Select, OrderBy is parsed.

    System.Linq.Dynamic.Core NuGet
  • Critical 9.8
    CVE-2023-33584 Public exploit EPSS 14%

    Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to…

  • Critical 9.8
    CVE-2023-34600 Public exploit EPSS 24%

    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

    loganalyzer Ubuntu
  • Critical 9.8
    CVE-2023-35885 Public exploit Scanner template EPSS 74%

    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

  • Critical 9.8
    CVE-2023-29357 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    Microsoft Microsoft SharePoint Server 2019
    KEV Jan 10, 2024
  • Critical 9.8
    CVE-2023-3047 Public exploit

    SQLi in TMT's Lockcell

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15.

    TMT Lockcell
  • Critical 9.2
    CVE-2023-27997 Exploited · Ransomware Public exploit EPSS 87%

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, vers…

    Fortinet FortiOS FortiProxy FortiOS-6K7K Network devices
    KEV Jun 13, 2023
  • Critical 9.8
    CVE-2023-31541 Public exploit

    A unrestricted file upload vulnerability was discovered in the ‘Browse and upload images’ feature of the CKEditor v1.2.…

  • Critical 9.8
    CVE-2023-2986 Public exploit EPSS 43%

    Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

    The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.14.2. This is due to insufficient encryption on the user being supplied during the abandoned cart link decode through the p…

    Tyche Softwares Abandoned Cart Lite for WooCommerce Web / CMS
  • Critical 9.8
    CVE-2023-20887 Exploited Public exploit Scanner template EPSS 98%

    Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMwar…

    KEV Jun 22, 2023
  • Critical 9.1
    CVE-2021-4374 Public exploit Scanner template EPSS 16%

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    The WordPress Automatic Plugin for WordPress is vulnerable to arbitrary options updates in versions up to, and including, 3.53.2. This is due to missing authorization and option validation in the process_form.php file. This makes it possible for unauthenticat…

    ValvePress WordPress Automatic Plugin Web / CMS
  • Critical 9.8
    CVE-2020-36708 Public exploit Scanner template EPSS 65%

    Epsilon Framework Themes (Various Versions) - Function Injection

    The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.…

    WP Chill silkalns Macho Themes Activello
  • Critical 9.8
    CVE-2023-34362 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023…

    KEV Jun 2, 2023
  • Critical 9.8
    CVE-2023-33669 Public exploit

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c func…

  • Critical 9.8
    CVE-2023-33476 Public exploit

    ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by…

    minidlna minidlna Debian Ubuntu