Skip to content
OpenAdvisories

Archive

19 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /19 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.3
    CVE-2023-2971

    Typora Local File Disclosure

    Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markd…

    Typora Typora
  • High 8.6
    CVE-2023-2318

    MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution

    DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in the context of MarkText main window. This vulnerability can be exploited if a user copies text from a …

    MarkText MarkText
  • High 8.6
    CVE-2023-2317

    Typora DOM-Based Cross-site Scripting leading to Remote Code Execution

    DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context of Typora main window via loading typora://app/typemark/updater/update.html in <embed> tag. This vu…

    Typora Typora
  • High 7.4
    CVE-2023-2316

    Typora Local File Disclosure

    Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/<absolute-path>". This vulnerability can be exploited if a user opens a malicious mar…

    Typora Typora
  • High 8.2
    CVE-2023-2110

    Obsidian Local File Disclosure

    Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a user opens…

    Obsidian Obsidian
  • High 8.3
    CVE-2023-4433

    Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit

    Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

    cockpit-hq cockpit-hq/cockpit cockpit-hq/cockpit Packagist
  • High 8.3
    CVE-2023-4432

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

    cockpit-hq cockpit-hq/cockpit cockpit-hq/cockpit Packagist