Skip to content
OpenAdvisories

Archive

12 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /12 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2023-21251 Public exploit

    In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper i…

    Google Android Android
  • Unscored —
    CVE-2023-21246 Public exploit

    In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to…

    Google Android Android
  • Unscored —
    CVE-2023-21238 Public exploit

    In visitUris of RemoteViews.java, there is a possible leak of images between users due to a confused deputy. This could…

    Google Android Android
  • Unscored —
    CVE-2023-20918 Public exploit

    In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused de…

    Google Android Android
  • Medium 5.9
    CVE-2023-3635 Public exploit

    Okio GzipSource unhandled exception Denial of Service

    GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

    thingsboard-tb-node thingsboard-tb-mqtt-transport trino trino-plugin-opensearch Ubuntu Wolfi Maven
  • High 7.3
    CVE-2023-3643 Public exploit Scanner template EPSS 75%

    Boss Mini document file inclusion

    A vulnerability was found in Boss Mini 1.4.0 Build 6221. It has been classified as critical. This affects an unknown part of the file boss/servlet/document. The manipulation of the argument path leads to file inclusion. It is possible to initiate the attack r…

  • Unscored —
    CVE-2023-37456 Public exploit

    The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affe…

    Mozilla Firefox for iOS iOS Browsers
  • Critical 9.8
    CVE-2023-37582 Public exploit Scanner template EPSS 90%

    Apache RocketMQ: Possible remote code execution when using the update configuration function

    The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. When NameServer address are leaked on the extranet and lack permission verification, an attacker can ex…

    Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-namesrv Maven
  • Unscored —
    CVE-2023-33902 Public exploit

    In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no addi…

    Unisoc (Shanghai) Technologies SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
  • Unscored —
    CVE-2023-33668 Public exploit

    DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover account…

  • Unscored —
    CVE-2023-36266 Public exploit

    An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Brow…

  • Unscored —
    CVE-2023-30226 Public exploit

    An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to …

  • Unscored —
    CVE-2023-37629 Public exploit Scanner template EPSS 23%

    Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sen…