Skip to content
OpenAdvisories

Archive

25 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /25 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

22 results · Clear filters · Feed

  • High 7.5
    CVE-2023-38493

    Paths contain matrix variables bypass decorators

    Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria…

    LINE Armeria com.linecorp.armeria:armeria Maven
  • High 7.5
    CVE-2023-37920

    Certifi's removal of e-Tugra root certificate

    Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were…

    certifi python-certifi python-pip certifi Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 7.0
    CVE-2023-37907

    Cryptomator's MSI installer allows local privilege escalation

    Cryptomator is data encryption software for users who store their files in the cloud. Prior to version 1.9.2, the MSI installer provided on the homepage allows local privilege escalation (LPE) for low privileged users, if already installed. The problem occurs…

    cryptomator cryptomator
  • High 8.1
    CVE-2023-37460 Public exploit

    Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver

    Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file c…

    codehaus-plexus plexus-archiver javapackages-bootstrap org.codehaus.plexus:plexus-archiver Ubuntu Azure Linux Maven
  • High 8.8
    CVE-2023-37258

    DataEase has a SQL injection vulnerability that can bypass blacklists

    DataEase is an open source data visualization analysis tool. Prior to version 1.18.9, DataEase has a SQL injection vulnerability that can bypass blacklists. The vulnerability has been fixed in v1.18.9. There are no known workarounds.

    dataease dataease
  • High 7.7
    CVE-2023-36826

    Sentry vulnerable to improper authorization on debug and artifact file downloads

    Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user d…

    getsentry sentry sentry PyPI
  • High 8.2
    CVE-2023-35944

    Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes

    Envoy is an open source edge and service proxy designed for cloud-native applications. Envoy allows mixed-case schemes in HTTP/2, however, some internal scheme checks are case-sensitive. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, this can…

    envoyproxy envoy
  • High 8.6
    CVE-2023-35941

    Envoy vulnerable to OAuth2 credentials exploit with permanent validity

    Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.27.0, 1.26.4, 1.25.9, 1.24.10, and 1.23.12, a malicious client is able to construct credentials with permanent validity in some specific scenarios. This…

    envoyproxy envoy
  • High 8.6
    CVE-2023-34235

    Leaking sensitive user information still possible by filtering on private with prefix fields

    Strapi is an open-source headless content management system. Prior to version 4.10.8, it is possible to leak private fields if one is using the `t(number)` prefix. Knex query allows users to change the default prefix. For example, if someone changes the prefi…

    strapi strapi @strapi/utils @strapi/database npm
  • High 7.5
    CVE-2023-2626

    Authentication Bypass in OpenThread Boarder Router devices

    There exists an authentication bypass vulnerability in OpenThread border router devices and implementations. This issue allows unauthenticated nodes to craft radio frames using “Key ID Mode 2”: a special mode using a static encryption key to bypass security c…

    Google Nest Hub Max Nest Wifi 6E Nest Wifi Point
  • High 7.1
    CVE-2023-36385

    WordPress PostX – Gutenberg Blocks for Post Grid Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in wpxpo PostX – Gutenberg Post Grid Blocks plugin <= 2.9.9 versions.

    wpxpo PostX – Gutenberg Post Grid Blocks
  • High 7.1
    CVE-2023-34017

    WordPress Five Star Restaurant Reservations Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FiveStarPlugins Five Star Restaurant Reservations plugin <= 2.6.7 versions.

    Five Star Plugins Five Star Restaurant Reservations
  • High 7.1
    CVE-2023-36502

    WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.

    Cththemes Balkon
  • High 7.1
    CVE-2023-36501

    WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Winkler teachPress plugin <= 9.0.2 versions.

    Michael Winkler teachPress
  • High 8.3
    CVE-2023-3548

    IQ Wifi 6

    An unauthorized user could gain account access to IQ Wifi 6 versions prior to 2.0.2 by conducting a brute force authentication attack.

    Johnson Controls IQ Wifi 6
  • High 7.1
    CVE-2023-35043

    WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.

    Neha Goel Recent Posts Slider
  • High 8.2
    CVE-2023-3486 EPSS 79%

    PaperCut NG Unauthenticated File Upload

    An authentication bypass exists in PaperCut NG versions 22.0.12 and prior that could allow a remote, unauthenticated attacker to upload arbitrary files to the PaperCut NG host’s file storage. This could exhaust system resources and prevent the service from op…

    PaperCut PaperCut NG
  • High 7.1
    CVE-2023-33925

    WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions.

    PluginForage WooCommerce Product Categories Selection Widget Web / CMS
  • High 7.1
    CVE-2023-21406

    Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication

    Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. …

    Axis Communications AB AXIS A1001 Network Door Controller
  • High 7.5
    CVE-2023-34434

    Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param

    Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0.  The attacker could bypass the current logic and achieve arbitrary file reading. To solve it, users are adv…

    Apache Software Foundation Apache InLong org.apache.inlong:manager-pojo Maven
  • High 7.5
    CVE-2023-35067

    Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System

    Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable. This issue affects E-Invoice Approval System: before v.20230701.

    Infodrom Software E-Invoice Approval System
  • High 7.3
    CVE-2023-3873

    Campcodes Beauty Salon Management System index.php sql injection

    A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. This issue affects some unknown processing of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The a…

    Campcodes Beauty Salon Management System