Skip to content
OpenAdvisories

Archive

7 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /7 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.6
    CVE-2023-37262

    CC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by Default

    CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to versions 1.20.1-1.106.0, 1.19.4-1.106.0, 1.19.2-1.101.3, 1.18.2-1.101.3, and 1.16.5-1.101.3, if the cc-tweaked plugin is running on a Minecraft serve…

    cc-tweaked CC-Tweaked
  • Critical 9.6
    CVE-2023-37261

    OpenComputers's SSRF to cloud service metadata services and local IPv6 addresses not blocked by default

    OpenComputers is a Minecraft mod that adds programmable computers and robots to the game. This issue affects every version of OpenComputers with the Internet Card feature enabled; that is, OpenComputers 1.2.0 until 1.8.3 in their most common, default configur…

    MightyPirates OpenComputers
  • Critical 10.0
    CVE-2022-4361 Public exploit

    Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC

    Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an attacker to execute malicious scripts by setting the AssertionConsumerServiceURL val…

    Keycloak Keycloak org.keycloak:keycloak-services Maven
  • Critical 10.0
    CVE-2021-32495

    Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory aft…

    radare2 radare2 radare2 Ubuntu
  • Critical 10.0
    CVE-2021-32494

    Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create …

    radare2 radare2 radare2 Ubuntu
  • Critical 10.0
    CVE-2021-33796

    In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service.

    MuJS MuJS mujs Debian