Skip to content
OpenAdvisories

Archive

3 June 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Low 3.7

    Klapp App JSON Web Token improper authentication

    A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.

  • Low 3.5

    Server Status HTTP Status/SMTP Status cross site scripting

    A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/SMTP Status. The manipulation leads to cross site scripting. The attack may be initiated remotely. T…

  • Low 3.5

    Countdown Timer Macro cross site scripting

    A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose…

  • Low 3.5

    Linking New Windows Macro cross site scripting

    A vulnerability classified as problematic has been found in Linking. This affects an unknown part of the component New Windows Macro. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose…

  • Low 3.5

    Refined Toolkit UI-Image/UI-Button cross site scripting

    A vulnerability was found in Refined Toolkit. It has been rated as problematic. Affected by this issue is some unknown functionality of the component UI-Image/UI-Button. The manipulation leads to cross site scripting. The attack may be launched remotely. The …

  • Low 3.5

    PlantUML Database Information Macro cross site scripting

    A vulnerability was found in PlantUML 6.43. It has been declared as problematic. Affected by this vulnerability is the component Database Information Macro. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has b…

  • Low 2.6

    Invite bypasses user approval in Discourse

    Discourse is an open source platform for community discussion. Prior to version 2.8.4 on the `stable` branch and 2.9.0beta5 on the `beta` and `tests-passed` branches, inviting users on sites that use single sign-on could bypass the `must_approve_users` check …

  • Low 3.5

    Fast Food Ordering System Master List Master.php cross site scripting

    A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> lead…

  • Low 2.5

    Buffer Over-read in bfabiszewski/libmobi

    Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.