Skip to content
OpenAdvisories

Archive

28 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /28 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.6
    CVE-2022-4920

    Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to…

    Google Chrome chromium Browsers Debian
  • Critical 9.6
    GHSA-8www-cffh-4q98

    Anyone with a share link can RESET all website data in Umami

    ### Summary Anyone with a share link (permissions to view) can reset the website data. ### Details When a user navigates to a `/share/` URL, he receives a share token which is used for authentication. This token is later verified by `useAuth`. After the token…

    umami npm
  • Critical 9.8
    CVE-2023-39022

    Code injection in oscore

    oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createStateless. This vulnerability is exploited via passing an unchecked argument.

    opensymphony:oscore Maven
  • Critical 9.8
    CVE-2023-39021

    Code injection in wix-embedded-mysql

    wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply. This vulnerability is exploited via passing an unchecked argument.

    com.wix:wix-embedded-mysql Maven
  • Critical 9.8
    CVE-2023-39013

    Code injection in Duke

    Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init.

    no.priv.garshol.duke:duke Maven
  • Critical 9.8
    CVE-2023-39020

    Code injection in stanford-parser

    stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2PipedInputStream. This vulnerability is exploited via passing an unchecked argument.

    edu.stanford.nlp:stanford-parser Maven
  • Critical 9.8
    CVE-2023-39015

    Code injection in webmagic-core

    webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.

    us.codecraft:webmagic-core Maven
  • Critical 9.8
    CVE-2023-39010

    Code injection in BoofCV

    BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file.

    org.boofcv:boofcv-core Maven
  • Critical 9.8
    CVE-2023-38992 Scanner template EPSS 73%

    SQL injection in jeecg-boot

    jeecg-boot v3.5.1 was discovered to contain a SQL injection vulnerability via the title parameter at /sys/dict/loadTreeData.

    org.jeecgframework.boot:jeecg-boot-common Maven
  • Critical 9.8
    CVE-2023-37754 EPSS 30%

    Code injection in PowerJob

    PowerJob v4.3.3 was discovered to contain a remote command execution (RCE) vulnerability via the instanceId parameter at /instance/detail.

    tech.powerjob:powerjob-common Maven