Skip to content
OpenAdvisories

Archive

1 January 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-6421 Public exploit Scanner template

    Download Manager < 3.2.83 - Unauthenticated Protected File Download Password Leak

    The Download Manager WordPress plugin before 3.2.83 does not protect file download's passwords, leaking it upon receiving an invalid one.

  • High 8.8
    CVE-2023-50094 Public exploit Scanner template EPSS 14%

    reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metach…