Skip to content
OpenAdvisories

Archive

11 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /11 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.8
    CVE-2023-0091

    Keycloak has lack of validation of access token on client registrations endpoint

    A flaw was found in Keycloak, where it did not properly check client tokens for possible revocation in its client credential flow. This flaw allows an attacker to access or modify potentially sensitive information.

    redhat.com Keycloak org.keycloak:keycloak-core Maven
  • Low 3.5
    CVE-2020-36649

    mholt PapaParse papaparse.js redos

    A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able …

    mholt PapaParse mediawiki mediawiki Debian Ubuntu npm
  • Low 3.5
    CVE-2018-25074

    Prestaul skeemas base.js redos

    A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named…

    Prestaul skeemas skeemas npm
  • Low 3.5
    CVE-2018-25073

    Newcomer1989 TSN-Ranksystem bot.php getlog cross site scripting

    A vulnerability has been found in Newcomer1989 TSN-Ranksystem up to 1.2.6 and classified as problematic. This vulnerability affects the function getlog of the file webinterface/bot.php. The manipulation leads to cross site scripting. The attack can be initiat…

    Newcomer1989 TSN-Ranksystem
  • Low 3.5
    CVE-2012-10004

    backdrop-contrib Basic Cart basic_cart.cart.inc basic_cart_checkout_form_submit cross site scripting

    A vulnerability was found in backdrop-contrib Basic Cart on Drupal. It has been classified as problematic. Affected is the function basic_cart_checkout_form_submit of the file basic_cart.cart.inc. The manipulation leads to cross site scripting. It is possible…

    backdrop-contrib Basic Cart