Skip to content
OpenAdvisories

Archive

1 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /1 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.5
    CVE-2023-37478 Public exploit

    pnpm incorrectly parses tar archives relative to specification

    pnpm is a package manager. It is possible to construct a tarball that, when installed via npm or parsed by the registry is safe, but when installed via pnpm is malicious, due to how pnpm parses tar archives. This can result in a package that appears safe on t…

    pnpm pnpm pnpm @pnpm/linux-arm64 npm
  • Unscored —
    CVE-2023-34960 Public exploit Scanner template EPSS 99%

    A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to e…

  • Unscored —
    CVE-2023-34634 Public exploit

    Greenshot 1.2.10 and below allows arbitrary code execution because .NET content is insecurely deserialized when a .gree…

  • Unscored —
    CVE-2023-39147 Public exploit

    An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a craft…

  • Unscored —
    CVE-2023-38357 Public exploit

    Session tokens in RWS WorldServer 11.7.3 and earlier have a low entropy and can be enumerated, leading to unauthorized …

  • Unscored —
    CVE-2023-37772 Public exploit

    Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at …

  • Critical 9.8
    CVE-2022-39986 Public exploit Scanner template EPSS 99%

    RaspAP Command Injection vulnerability

    A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthenticated attackers to execute arbitrary commands via the cfg_id parameter in /ajax/openvpn/activate_ovpncfg.php and /ajax/openvpn/del_ovpncfg.php.

    billz/raspap-webgui Packagist