Skip to content
OpenAdvisories

Archive

26 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /26 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-40701

    A directory traversal vulnerability exists in the httpd delfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-21072…

    Siretta QUARTZ-GOLD
  • Medium 4.9
    CVE-2022-38088

    A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-2107…

    Siretta QUARTZ-GOLD
  • Medium 6.1
    GHSA-3w9w-9833-gcpv

    Security bug in ConvertToSinglePlane when used with untrusted content from the DDS loader

    ### Impact A memory overwrite bug was reported by a security researcher in the **ConvertToSinglePlane** method via the *texconv* command-line tool when given an invalid height for planar video textures such as NV12. This can be a potential security bug for an…

    directxtex_desktop_2019 directxtex_uwp directxtex_desktop_win10 NuGet
  • Medium 5.5
    CVE-2023-0516

    SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection

    A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file user/forget_password.php of the component Parameter Handler. The manipulation of the argu…

    SourceCodester Online Tours & Travels Management System
  • Medium 5.5
    CVE-2023-0515

    SourceCodester Online Tours & Travels Management System Parameter forget_password.php sql injection

    A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/forget_password.php of the component Parameter Handler. The manipulation of the a…

    SourceCodester Online Tours & Travels Management System
  • Medium 6.5
    CVE-2023-22739

    Discourse subject to Allocation of Resources Without Limits or Throttling

    Discourse is an open source platform for community discussion. Versions prior to 3.0.1 (stable), 3.1.0.beta2 (beta), and 3.1.0.beta2 (tests-passed) are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in …

    Discourse Discourse
  • Medium 6.1
    CVE-2020-22327

    An issue was discovered in HFish 0.5.1. When a payload is inserted where the name is entered, XSS code is triggered whe…

  • Medium 5.3
    CVE-2023-0493 Public exploit

    Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver

    Improper Neutralization of Equivalent Special Elements in GitHub repository btcpayserver/btcpayserver prior to 1.7.5.

    BTCPay Server btcpayserver/btcpayserver
  • Medium 6.1
    CVE-2023-22971

    Cross Site Scripting (XSS) vulnerability in Hughes Network Systems Router Terminal for HX200 v8.3.1.14, HX90 v6.11.0.5,…

  • Medium 5.7
    CVE-2022-47951

    OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

    An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that refe…

    nova nova glance nova Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2021-36686

    Cross-site Scripting in yapi-vendor

    Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.

    yapi-vendor npm