Skip to content
OpenAdvisories

Archive

1 January 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.5

    admont28 Ingnovarq insertarSliderAjax.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site…

  • Low 2.6

    Ziftr primecoin bitcoinrpc.cpp HTTPAuthorized timing discrepancy

    A vulnerability classified as problematic was found in Ziftr primecoin up to 0.8.4rc1. Affected by this vulnerability is the function HTTPAuthorized of the file src/bitcoinrpc.cpp. The manipulation of the argument strUserPass/strRPCUserColonPass leads to obse…

  • Low 3.1

    SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the …

  • Low 3.5

    Zenoss Dashboard defaultportlets.js cross site scripting

    A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTM…

  • Low 3.5

    flar2 ElementalX ipsec xfrm_user.c xfrm_dump_policy_done denial of service

    A vulnerability classified as problematic has been found in flar2 ElementalX up to 6.x on Nexus 9. Affected is the function xfrm_dump_policy_done of the file net/xfrm/xfrm_user.c of the component ipsec. The manipulation leads to denial of service. Upgrading t…

  • Low 3.3
    CVE-2022-47952 Public exploit

    lxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists,…