Mar 16, 2023 Cyber Threat Intelligence

Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.

Daily summary

  • 10 new critical disclosures — review patch status on exposed services.

Top threats today

Three highest-priority changes — analyst brief, not a CVE dump.

Critical exposure

CVE-2022-43604 Opener Project Opener RCE

  • CVSS 10
  • Remote code execution exposure

New critical Opener Project Opener RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2022-43605 Opener Project Opener RCE

  • CVSS 10
  • Remote code execution exposure

New critical Opener Project Opener RCE (CVSS 10) — fresh disclosure window; early internet scanning often precedes mature exploit chains.

Critical exposure

CVE-2023-28100 Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

  • CVSS 10

New critical disclosure (CVSS 10) — high severity with a short public awareness window before exploit material typically surfaces.

Active exploitation

CISA KEV — confirmed in-the-wild exploitation.

Nothing flagged in this category for this digest.

View KEV additions

Exploit & PoC activity

Nothing flagged in this category for this digest.

View new exploit links

Exploitation dynamics

Nothing flagged in this category for this digest.

See EPSS increases

New critical disclosures

CVE-2020-19947 CVSS 9.6

Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of th...

CVE-2020-22647 CVSS 9.1

An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.

CVE-2022-43604 CVSS 10

An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer devel...

CVE-2022-43605 CVSS 10

An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer devel...

CVE-2023-0811 CVSS 9.1

Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored.

CVE-2023-1256 CVSS 9.8

The listed versions of AVEVA Plant SCADA and AVEVA Telemetry Server are vulnerable to an improper authorization exploit which could allow...

Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with syste...

CVE-2023-27040 CVSS 9.8

Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.

CVE-2023-27041 CVSS 9.8

School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_...

CVE-2023-28100 CVSS 10

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux.

View critical disclosures

cvelogic Threat Intelligence