Skip to content
OpenAdvisories

Archive

14 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /14 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

60 results · Feed

  • High 7.5
    CVE-2023-38286

    Spring-boot-admin sandbox bypass via crafted HTML

    Thymeleaf through 3.1.1.RELEASE, as used in spring-boot-admin (aka Spring Boot Admin) through 3.1.1 and other products, allows sandbox bypass via crafted HTML. This may be relevant for SSTI (Server Side Template Injection) and code execution in spring-boot-ad…

    de.codecentric:spring-boot-admin-server Maven
  • Unscored —
    CVE-2023-38336

    netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related …

    netkit-rsh netkit-rsh Debian Ubuntu
  • High 7.5
    CVE-2023-38337

    rswag vulnerable to arbitrary JSON and YAML file read via directory traversal

    rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.

    rswag RubyGems
  • High 7.5
    CVE-2023-38325

    cryptography mishandles SSH certificates

    The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.

    cryptography py3-cryptography conda Alpine Wolfi PyPI
  • High 7.7
    CVE-2023-32760

    An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain s…

  • High 8.1
    CVE-2023-32761

    Cross Site Request Forgery (CSRF) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 a…

  • High 7.5
    CVE-2023-32759

    An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain s…

  • Unscored —
    CVE-2023-37722

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37719

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37716

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 wer…

  • Unscored —
    CVE-2023-37718

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37794

    WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.…

  • Medium 5.4
    CVE-2023-37223

    Cross Site Scripting (XSS) vulnerability in Archer Platform before v.6.13 and fixed in v.6.12.0.6 and v.6.13.0 allows a…

  • Unscored —
    CVE-2023-37717

    Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 wer…

  • Unscored —
    CVE-2023-37714

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37723

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37793

    WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp.

  • Unscored —
    CVE-2023-37721

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Unscored —
    CVE-2023-37715

    Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page paramete…

  • Medium 6.0
    CVE-2023-37224

    An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain s…