Skip to content
OpenAdvisories

Archive

June 2023

Vulnerabilities first published in this month (UTC), newest first.

131 results · Clear filters · Feed

  • High 8.8
    CVE-2023-33410 Public exploit

    Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The v…

  • High 7.8
    CVE-2023-33733 Public exploit

    Reportlab vulnerable to remote code execution

    Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file.

  • Medium 5.4
    CVE-2023-33408 Public exploit

    Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validatio…

  • Medium 6.5
    CVE-2023-33409 Public exploit

    Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/co…

  • Critical 9.8
    CVE-2023-34362 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023…

    KEV Jun 2, 2023
  • Medium 6.1
    CVE-2023-33731 Public exploit

    Reflected Cross Site Scripting (XSS) in the view dashboard detail feature in Microworld Technologies eScan management c…

  • Critical 9.8
    CVE-2023-33669 Public exploit

    Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the timeZone parameter in the sub_44db3c func…

  • Critical 9.8
    CVE-2023-33476 Public exploit

    ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by…

  • High 8.8
    CVE-2023-32707 Public exploit EPSS 79%

    ‘edit_user’ Capability Privilege Escalation

    In versions of Splunk Enterprise below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform below version 9.0.2303.100, a low-privileged user who holds a role that has the ‘edit_user’ capability assigned to it can escalate their privileges to that of the admi…

  • High 7.8
    CVE-2023-34312 Public exploit

    In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate po…

  • High 7.8
    CVE-2023-2598 Public exploit

    A flaw was found in the fixed buffer registration code for io_uring (io_sqe_buffer_register in io_uring/rsrc.c) in the …