Skip to content
OpenAdvisories

Archive

19 July 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-3519 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Unauthenticated remote code execution

    KEV Jul 19, 2023
  • Critical 9.1
    CVE-2023-30799 Public exploit

    MikroTik RouterOS Administrator Privilege Escalation

    MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse t…

  • Critical 9.8

    GeoVision GV-ADR2701 Improper Authentication

    In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application.

  • Critical 9.1
    CVE-2023-34034 Public exploit

    Access Control Bypass in Spring Security

    Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a security bypass.

  • Critical 10.0
    CVE-2023-3765 Scanner template EPSS 67%

    Absolute Path Traversal in mlflow/mlflow

    Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.