Skip to content
OpenAdvisories

Archive

4 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /4 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2023-0264 Public exploit

    Keycloak vulnerable to user impersonation via stolen UUID code

    A flaw was found in Keycloaks OpenID Connect user authentication, which may incorrectly authenticate requests. An authenticated attacker who could obtain information from a user request within the same realm could use that data to impersonate the victim and g…

    redhat.com Keycloak org.keycloak:keycloak-services Maven
  • High 7.8
    CVE-2023-38497 Public exploit

    Cargo not respecting umask when extracting crate archives

    Cargo downloads the Rust project’s dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1, did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate c…

    rust-lang cargo rust rustc Debian Ubuntu Azure Linux Alpine crates.io
  • Critical 9.8
    CVE-2023-39143 Public exploit Scanner template EPSS 80%

    PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delet…

  • Critical 9.8
    CVE-2023-29689 Public exploit EPSS 53%

    PyroCMS remote code execution vulnerability

    PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw. This vulnerability allows a malicious attacker to send customized commands to the server and execute arbitrary code on…

    pyrocms/pyrocms Packagist
  • Unscored —
    CVE-2023-30146 Public exploit

    Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy …

  • Medium 6.5
    CVE-2022-41401 Public exploit

    OpenRefine Server-Side Request Forgery vulnerability

    OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.

    openrefine openrefine org.openrefine:main Debian Ubuntu Maven