Skip to content
OpenAdvisories

Archive

24 August 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8

    A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transp…

  • Critical 9.8

    The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigur…

  • Critical 9.1

    XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki supports scheduled jobs that contain Groovy scripts. Currently, the job checks the content author of the job for programming right. However, modifyi…

  • Critical 9.1

    XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus…

  • Critical 9.8

    Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and …