Skip to content
OpenAdvisories

Archive

30 December 2022

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Low 3.5

    Sterc Google Analytics Dashboard for MODX Internal Search widget.analytics.tpl cross site scripting

    A vulnerability was found in Sterc Google Analytics Dashboard for MODX up to 1.0.5. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file core/components/analyticsdashboardwidget/elements/tpl/widget.analyt…

  • Low 3.5

    ghostlander Phoenixcoin main.cpp accept denial of service

    A vulnerability was found in ghostlander Phoenixcoin. It has been classified as problematic. Affected is the function CTxMemPool::accept of the file src/main.cpp. The manipulation leads to denial of service. Upgrading to version 0.6.6.1-pxc is able to address…

  • Low 3.7

    Macaron csrf csrf.go missing secure attribute

    A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file csrf.go. The manipulation of the argument Generate leads to sensitive cookie without secure attribute. The attack may be …

  • Low 2.6

    aerouk imageserve cross site scripting

    A vulnerability has been found in aerouk imageserve and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument REQUEST_URI leads to cross site scripting. The attack can be launched remotely. The…

  • Low 3.1

    aerouk imageserve File viewer.php path traversal

    A vulnerability, which was classified as problematic, was found in aerouk imageserve. Affected is an unknown function of the file public/viewer.php of the component File Handler. The manipulation of the argument filelocation leads to path traversal. It is pos…

  • Low 3.5

    Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting

    A vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. Th…

  • Low 3.5

    Chris92de AdminServ adminserv.php cross site scripting

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been rated as problematic. This issue affects some unknown processing of the file resources/core/adminserv.php. The manipulation of the argument error leads to cross site…

  • Low 3.5

    Chris92de AdminServ adminserv.php cross site scripting

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site …

  • Low 3.5

    pastebinit server.go pasteHandler path traversal

    A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of the file server.go. The manipulation of the argument r.URL.Path leads to path traversal. Upgrading to version 0.2.3 is ab…