Skip to content
OpenAdvisories

Archive

10 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /10 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-24489 Exploited Public exploit Scanner template EPSS 97%

    A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, cou…

    Citrix Citrix ShareFile Storage Zones Controller Network devices
    KEV Aug 16, 2023
  • Medium 6.1
    CVE-2023-24488 Public exploit Scanner template EPSS 81%

    Cross site scripting

    Cross site scripting vulnerability in Citrix ADC and Citrix Gateway  in allows and attacker to perform cross site scripting

    Citrix Citrix ADC and Citrix Gateway  Network devices
  • High 8.8
    CVE-2023-30765 Public exploit

    ​Delta Electronics InfraSuite Device Master Improper Access Control

    ​Delta Electronics InfraSuite Device Master versions prior to 1.0.7 contain improper access controls that could allow an attacker to alter privilege management configurations, resulting in privilege escalation.

    Delta Electronics InfraSuite Device Master ICS / OT
  • Unscored —
    CVE-2023-3219 Public exploit Scanner template

    EventON < 2.1.2 - Unauthenticated Post Access via IDOR

    The EventON WordPress plugin before 2.1.2 does not validate that the event_id parameter in its eventon_ics_download ajax action is a valid Event, allowing unauthenticated visitors to access any Post (including unpublished or protected posts) content via the i…

    Web / CMS
  • Unscored —
    CVE-2023-3076 Public exploit

    MStore API < 3.9.9 - Unauthenticated Privilege Escalation

    The MStore API WordPress plugin before 3.9.9 does not prevent visitors from creating user accounts with the role of their choice via their wholesale REST API endpoint. This is only exploitable if the site owner paid to access the plugin's pro features.

    Web / CMS
  • Unscored —
    CVE-2023-2796 Public exploit Scanner template EPSS 43%

    EventON < 2.1.2 - Unauthenticated Event Access

    The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventon_ics_download ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id.

    Web / CMS
  • Medium 5.0
    CVE-2023-35887 Public exploit

    Apache MINA SSHD: Information disclosure bugs with RootedFilesystem

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" in…

    Apache Software Foundation Apache MINA SSHD sonarqube org.apache.sshd:sshd-core Wolfi Maven