Skip to content
OpenAdvisories

Archive

18 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /18 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2023-22047 Public exploit Scanner template EPSS 77%

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported vers…

    Oracle PeopleSoft Enterprise PT PeopleTools
  • Low 2.7
    CVE-2021-4428 Public exploit EPSS 16%

    what3words Autosuggest Plugin Setting class-w3w-autosuggest-public.php enqueue_scripts information disclosure

    A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the function enqueue_scripts of the file w3w-autosuggest/public/class-w3w-autosuggest-public.php of the c…

    what3words Autosuggest Plugin
  • High 7.3
    CVE-2023-34035 Public exploit

    Spring Security's authorization rules can be misconfigured when using multiple servlets

    Spring Security versions 5.8 prior to 5.8.5, 6.0 prior to 6.0.5, and 6.1 prior to 6.1.2 could be susceptible to authorization rule misconfiguration if the application uses requestMatchers(String) and multiple servlets, one of them being Spring MVC’s Dispatche…

    org.springframework.security:spring-security-config Maven
  • Medium 5.5
    CVE-2020-36762 Public exploit

    ONS Digital RAS Collection Instrument comment.yml jobs os command injection

    A vulnerability was found in ONS Digital RAS Collection Instrument up to 2.0.27 and classified as critical. Affected by this issue is the function jobs of the file .github/workflows/comment.yml. The manipulation of the argument $COMMENT_BODY leads to os comma…

    ONS Digital RAS Collection Instrument
  • High 8.8
    CVE-2022-34155 Public exploit

    WordPress OAuth Single Sign On – SSO (OAuth Client) Plugin <= 6.23.3 is vulnerable to Broken Authentication

    Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.

    miniOrange OAuth Single Sign On – SSO (OAuth Client)
  • Unscored —
    CVE-2023-38434 Public exploit

    xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method.