Skip to content
OpenAdvisories

Archive

30 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /30 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Unscored —
    RUSTSEC-2023-0051

    `dlopen_derive` is unmaintained

    `dlopen_derive` hasn't been updated since June 9, 2019. `dlopen_derive` depends on [`quote = "0.6.12"`] and [`syn = "0.15.34"`]. Versions `1.0.0` of these dependencies were published on August 13, 2019. The `0.*` versions haven't received updates since. Note …

    dlopen_derive crates.io
  • High 7.3
    CVE-2023-37219

    Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

    Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File

    Tadiran Telecom Composit
  • High 7.5
    CVE-2023-37218

    Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

    Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    Tadiran Telecom Aeonix
  • Medium 5.3
    CVE-2023-37217

    Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy

    Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy

    Tadiran Telecom Aeonix
  • High 7.5
    CVE-2023-37216

    AnaSystem SensMini M4 – an authenticated user can cause Denial of Service

    AnaSystem SensMini M4 – Using the configuration tool, an authenticated user can cause Denial of Service for the device

    AnaSystem SensMini M4
  • Medium 6.2
    CVE-2023-37215

    JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials

    JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials

    JBL soundbar multibeam
  • Critical 9.8
    CVE-2023-37214

    Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection

    Heights Telecom ERO1xS-Pro Dual-Band FW version BZ_ERO1XP.025.

    Heights Telecom ERO1xS-Pro Dual-Band WiFi
  • High 8.8
    CVE-2023-37213

    Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

    Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'

    SYNEL SYnergy Fingerprint Terminals
  • Critical 9.8
    CVE-2023-32227

    Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

    Synel SYnergy Fingerprint Terminals - CWE-798: Use of Hard-coded Credentials

    SYNEL SYnergy Fingerprint Terminals
  • High 8.3
    CVE-2023-32226

    Sysaid - CWE-552: Files or Directories Accessible to External Parties

    Sysaid - CWE-552: Files or Directories Accessible to External Parties -  Authenticated users may exfiltrate files from the server via an unspecified method.

    SysAid SysAid
  • Critical 9.8
    CVE-2023-32225

    Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type

    Sysaid - CWE-434: Unrestricted Upload of File with Dangerous Type -  A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method.

    SysAid SysAid