Skip to content
OpenAdvisories

Archive

3 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /3 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-2728 Public exploit

    Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin

    Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using ephemeral containers. The policy ensures pods running with a service account may only reference secrets specified in the…

    Kubernetes Kubernetes kubernetes k8s.io/kubernetes Debian Alpine Go
  • Medium 6.5
    CVE-2023-2727

    Bypassing policies imposed by the ImagePolicyWebhook admission plugin

    Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go
  • Medium 6.5
    CVE-2023-3395

    ​All versions of the TWinSoft Configuration Tool store encrypted passwords as plaintext in memory. An attacker with acc…

    Ovarro ​TBox MS-CPU32-S2 TBox TG2 TBox MS-CPU32
  • Medium 6.5
    CVE-2023-36611

    The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could all…

    Ovarro ​TBox MS-CPU32-S2 TBox TG2 TBox MS-CPU32
  • Medium 5.9
    CVE-2023-36610

    ​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate …

    Ovarro TBox MS-CPU32 TBox LT2 TBox RM2
  • Medium 6.5
    CVE-2023-36608

    The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.

    Ovarro TBox MS-CPU32 TBox LT2 TBox RM2
  • Medium 6.5
    CVE-2023-36819

    Knowage-Server vulnerable to Path traversal in download functionalities

    Knowage is the professional open source suite for modern business analytics over traditional sources and big data systems. The endpoint `_/knowage/restful-services/dossier/importTemplateFile_` allows authenticated users to download template hosted on the serv…

    KnowageLabs Knowage-Server
  • Medium 6.1
    CVE-2023-36816

    Cross-Site Scripting (XSS) at Account creation in 2FAuth

    2FA is a Web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. Cross site scripting (XSS) injection can be done via the account/service field. This was tested in docker-compose environment. This vulnerability has been p…

    Bubka 2FAuth
  • Medium 4.4
    CVE-2023-3438

    An unquoted Windows search path vulnerability existed in the install the MOVE 4.10.x and earlier Windows install servic…

    Trellix Trellix Move