Skip to content
OpenAdvisories

Archive

6 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /6 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-35987

    PiiGAB M-Bus Use of Hard-coded Credentials

    PiiGAB M-Bus contains hard-coded credentials which it uses for authentication.

    PiiGAB M-Bus SoftwarePack
  • Critical 10.0
    CVE-2023-36460 EPSS 40%

    Mastodon vulnerable to arbitrary file creation through media attachments

    Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, and 4.1.3, attackers using carefully crafted media files can cause Mastodon's media processing code to create arbitrary f…

    mastodon mastodon
  • Critical 9.3
    CVE-2023-36459

    Mastodon vulnerable to Cross-site Scripting through oEmbed preview cards

    Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and 4.1.3, an attacker using carefully crafted oEmbed data can bypass the HTML sanitization performed by Mastodon and inclu…

    mastodon mastodon
  • Critical 9.8
    CVE-2023-23902

    A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially craf…

    Milesight UR32L
  • Critical 9.0
    CVE-2023-34192 Exploited Scanner template EPSS 77%

    Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary c…

    KEV Feb 25, 2025
  • Critical 9.8
    CVE-2023-29824

    A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor a…

    scipy scipy Debian PyPI
  • Critical 9.8
    CVE-2023-36188

    langchain vulnerable to arbitrary code execution

    An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.

    langchain PyPI