Skip to content
OpenAdvisories

Archive

29 January 2023

Vulnerabilities first published on this day (UTC), newest first.

← December 2022 2023 / January /29 February 2023 →
  1. 123
  2. 276
  3. 394
  4. 480
  5. 584
  6. 678
  7. 748
  8. 818
  9. 965
  10. 10215
  11. 11149
  12. 12103
  13. 1380
  14. 1428
  15. 1531
  16. 1667
  17. 17164
  18. 1893
  19. 1956
  20. 20103
  21. 219
  22. 227
  23. 2394
  24. 24125
  25. 2560
  26. 26174
  27. 2786
  28. 287
  29. 2912
  30. 30102
  31. 3151
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Low 2.0
    CVE-2016-15022

    mosbth cimage check_system.php cross site scripting

    A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file check_system.php. The manipulation of the argument $_SERVER['SERVER_SOFTWARE'] leads to cross …

    mosbth cimage mos/cimage Packagist
  • Low 3.5
    CVE-2009-10003

    capnsquarepants wordcraft tag.php cross site scripting

    A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the atta…

    capnsquarepants wordcraft
  • Low 3.5
    CVE-2023-0571

    SourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting

    A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file createcustomer.php of the component Add Customer. The manipulation of the argument name leads to …

    SourceCodester Canteen Management System
  • Medium 6.3
    CVE-2023-0570

    SourceCodester Online Tours & Travels Management System payment_operation.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Online Tours & Travels Management System 1.0. This affects an unknown part of the file user\operations\payment_operation.php. The manipulation of the argument booking_id leads to s…

    SourceCodester Online Tours & Travels Management System
  • High 8.1
    CVE-2023-0569

    Weak Password Requirements in publify/publify

    Weak Password Requirements in GitHub repository publify/publify prior to 9.2.10.

    publify publify/publify publify_core RubyGems
  • Medium 5.3
    CVE-2023-0572

    Unchecked Error Condition in froxlor/froxlor

    Unchecked Error Condition in GitHub repository froxlor/froxlor prior to 2.0.10.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • Medium 6.2
    CVE-2023-0566

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor prior to 2.0.10.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • Medium 5.5
    CVE-2023-0565

    Business Logic Errors in froxlor/froxlor

    Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.10.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • Medium 5.4
    CVE-2023-0564

    Weak Password Requirements in froxlor/froxlor

    Weak Password Requirements in GitHub repository froxlor/froxlor prior to 2.0.10.

    froxlor froxlor/froxlor froxlor/froxlor Packagist
  • Medium 5.4
    CVE-2023-24065

    NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billi…

  • High 7.3
    CVE-2022-48285

    JSZip contains Path Traversal via loadAsync

    loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

    jszip node-jszip node-jszip beust-jcommander Debian Ubuntu Azure Linux npm
  • Medium 5.3
    CVE-2021-46873

    WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be ab…

    wireguard Ubuntu