Skip to content
OpenAdvisories

Archive

28 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /28 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 5.5
    CVE-2021-4315

    NYUCCL psiTurk experiment.py special elements used in a template engine

    A vulnerability has been found in NYUCCL psiTurk up to 3.2.0 and classified as critical. This vulnerability affects unknown code of the file psiturk/experiment.py. The manipulation of the argument mode leads to improper neutralization of special elements used…

    NYUCCL psiTurk psiturk PyPI
  • Low 3.5
    CVE-2023-0563 Scanner template EPSS 38%

    PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting

    A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site …

    PHPGurukul Bank Locker Management System
  • High 7.3
    CVE-2023-0562 Scanner template EPSS 44%

    PHPGurukul Bank Locker Management System Login index.php sql injection

    A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql…

    PHPGurukul Bank Locker Management System
  • Medium 6.3
    CVE-2023-0561

    SourceCodester Online Tours & Travels Management System s.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. Affected is an unknown function of the file /user/s.php. The manipulation of the argument id leads to sql injection. It is possible to…

    SourceCodester Online Tours & Travels Management System
  • Medium 4.7
    CVE-2023-0560

    SourceCodester Online Tours & Travels Management System practice_pdf.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. This issue affects some unknown processing of the file admin/practice_pdf.php. The manipulation of the argument id leads to sql i…

    SourceCodester Online Tours & Travels Management System
  • Medium 6.3
    CVE-2023-23629

    Metabase subject to Improper Privilege Management

    Metabase is an open source data analytics platform. Affected versions are subject to Improper Privilege Management. As intended, recipients of dashboards subscriptions can view the data as seen by the creator of that subscription. This allows someone with gre…

    metabase metabase
  • Medium 5.7
    CVE-2023-23628

    Metabase subject to Exposure of Sensitive Information to an Unauthorized Actor

    Metabase is an open source data analytics platform. Affected versions are subject to Exposure of Sensitive Information to an Unauthorized Actor. Sandboxed users shouldn't be able to view data about other Metabase users anywhere in the Metabase application. Ho…

    metabase metabase