Skip to content
OpenAdvisories

Archive

5 July 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.6
    CVE-2023-36808 Public exploit EPSS 48%

    GLPI vulnerable to SQL injection through Computer Virtual Machine information

    GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine form and GLPI inventory request can be used to perform a SQL injection attack. Version 10.0.8 has a patch for this issue. A…

  • High 7.8
    CVE-2023-35001 Public exploit

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability

    Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace