Skip to content
OpenAdvisories

Archive

17 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /17 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-36846 Exploited Public exploit EPSS 93%

    Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

    A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't re…

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Critical 9.8
    CVE-2023-36845 Exploited Public exploit Scanner template EPSS 95%

    Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-36844 Exploited Public exploit Scanner template EPSS 90%

    Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables

    A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify …

    Juniper Networks Junos OS Network devices
    KEV Nov 13, 2023
  • Medium 5.3
    CVE-2023-40315 Public exploit

    ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN

    In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Hor…

    The OpenNMS Group Meridian Horizon org.opennms:opennms-webapp-rest Maven
  • Critical 9.8
    CVE-2023-2917 Public exploit EPSS 72%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an improper input validation, a path traversal vulnerability exists, via the filename field, when the ThinManager processes a certain function. I…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • High 7.5
    CVE-2023-2915 Public exploit EPSS 82%

    Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability

    The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability, Due to improper input validation, a path traversal vulnerability exists when the ThinManager software processes a certain function. If exploited, an unau…

    Rockwell Automation ThinManager® ThinServer™ ICS / OT
  • Medium 4.3
    CVE-2023-3244 Public exploit

    Comments Like Dislike <= 1.2.0 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset

    The Comments Like Dislike plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the restore_settings function called via an AJAX action in versions up to, and including, 1.2.0. This makes it possible for …

    happy-coders Comments Like Dislike Web / CMS
  • Unscored —
    CVE-2023-26469 Public exploit Scanner template EPSS 83%

    In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.