Skip to content
OpenAdvisories

Archive

13 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /13 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 8.1
    CVE-2023-37273 Public exploit

    Docker escape in Auto-GPT when running from docker-compose.yml included in git repo

    Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing `docker compose run auto-gpt` in the repo root uses a different docker-c…

    Significant-Gravitas Auto-GPT
  • High 7.0
    CVE-2022-24834 Public exploit EPSS 41%

    Heap overflow issue with the Lua cjson library used by Redis

    Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions…

    Redis Redis redis redis Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2023-34133 Public exploit Scanner template EPSS 73%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SonicWall GMS and…

    SonicWall GMS Analytics Network devices
  • Unscored —
    CVE-2023-34132 Public exploit

    Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…

    SonicWall GMS Analytics Network devices
  • High 8.8
    CVE-2023-34127 Public exploit EPSS 86%

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall G…

    SonicWall GMS Analytics Network devices
  • Critical 9.8
    CVE-2023-34124 Public exploit Scanner template EPSS 50%

    The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authenticati…

    SonicWall GMS Analytics Network devices
  • Unscored —
    CVE-2023-33768 Public exploit

    Incorrect signature verification of the firmware during the Device Firmware Update process of Belkin Wemo Smart Plug WS…

  • Unscored —
    CVE-2023-31704 Public exploit

    Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote atta…

  • Unscored —
    CVE-2023-31705 Public exploit

    A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated…

  • Unscored —
    CVE-2023-37598 Public exploit

    A Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial o…

  • Unscored —
    CVE-2023-37786 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Geeklog v2.2.2 allow attackers to execute arbitrary web scripts …

  • Unscored —
    CVE-2023-37599 Public exploit Scanner template

    An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory

  • Unscored —
    CVE-2022-42045 Public exploit

    Certain Zemana products are vulnerable to Arbitrary code injection. This affects Watchdog Anti-Malware 4.1.422 and Zema…