Skip to content
OpenAdvisories

Archive

3 July 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.6
    CVE-2023-30990 Public exploit

    IBM i command execution

    IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.

    IBM i
  • Medium 6.5
    CVE-2023-2728 Public exploit

    Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin

    Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the…

  • Unscored —
    CVE-2023-22906 Public exploit

    Hero Qubo HCD01_02_V1.38_20220125 devices allow TELNET access with root privileges by default, without a password.