Skip to content
OpenAdvisories

Archive

7 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /7 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-20180

    A vulnerability in the web interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct…

    Cisco Cisco Webex Meetings Network devices
  • Medium 5.4
    CVE-2023-20133

    A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a…

    Cisco Cisco Webex Meetings Network devices
  • Medium —
    GHSA-j2cr-jc39-wpx5

    Barberry Security Advisory - regarding x/auth periodic vesting accounts

    ### Impact In `PeriodicVestingAccount`, defined in `x/auth`, an attacker can initialize a victim's account as a malicious vesting account, which allows deposits but does not allow withdrawals. When the user then deposits funds into their account, those funds …

    github.com/cosmos/cosmos-sdk Go
  • Medium 6.4
    CVE-2021-39014

    IBM Cloud Object Storage System cross-site scripting

    IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a tr…

    IBM Cloud Object Storage System
  • Medium 4.7
    CVE-2021-33798

    A null pointer dereference was found in libpano13, version libpano13-2.9.20. The flow allows attackers to cause a denia…

    libpano13 libpano13 libpano13 Ubuntu
  • Medium 6.3
    CVE-2023-3534

    SourceCodester Shopping Website check_availability.php sql injection

    A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file check_availability.php. The manipulation of the argument email leads to sql injection. It is possible to launch t…

    SourceCodester Shopping Website
  • Medium 4.3
    CVE-2020-8934

    Site Kit by Google plugin for WordPress

    The Site Kit by Google plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 1.8.0 This is due to the lack of capability checks on the admin_enqueue_scripts action which displays the connection key. This make…

    Google Site Kit by Google Web / CMS
  • Medium 5.3
    CVE-2023-33008

    Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale

    Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe…

    Apache Software Foundation Apache Johnzon org.apache.johnzon:johnzon-mapper Maven
  • Medium 5.1
    CVE-2023-35890

    IBM WebSphere Application Server information disclosure

    IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security, caused by the improper encoding in a local configuration file. IBM X-Force ID: 258637.

    IBM WebSphere Application Server