Archive
January 2023
Vulnerabilities first published in this month (UTC), newest first.
157 results · Clear filters · Feed
-
Low 3.5
SiteFusion Application Server Extension getextension.php path traversal
A vulnerability, which was classified as problematic, was found in SiteFusion Application Server up to 6.6.6. This affects an unknown part of the file getextension.php of the component Extension Handler. The manipulation leads to path traversal. Upgrading to …
-
Low 2.7
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal servic…
-
Low 3.9
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause all remote domains to access the …
-
Low 2.0
mosbth cimage check_system.php cross site scripting
A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file check_system.php. The manipulation of the argument $_SERVER['SERVER_SOFTWARE'] leads to cross …
-
Low 3.5
capnsquarepants wordcraft tag.php cross site scripting
A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the atta…
-
Low 3.5
SourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting
A vulnerability has been found in SourceCodester Canteen Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file createcustomer.php of the component Add Customer. The manipulation of the argument name leads to …
-
Low 3.5
PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site …
-
Low 3.5
YAFNET Private Message PostPrivateMessage cross site scripting
A vulnerability, which was classified as problematic, has been found in YAFNET up to 3.1.10. This issue affects some unknown processing of the file /forum/PostPrivateMessage of the component Private Message Handler. The manipulation of the argument subject/me…
-
Low 3.5
PHPGurukul Online Security Guards Hiring System search-request.php cross site scripting
A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "><…
-
Low 3.5
Discourse membership requests lack character limit
Discourse is an open-source discussion platform. Prior to version 3.0.1 on the `stable` branch and 3.1.0.beta2 on the `beta` and `tests-passed` branches, when submitting a membership request, there is no character limit for the reason provided with the reques…
-
Low 3.5
A blind SSRF in GitLab CE/EE affecting all from 11.3 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 al…
-
Low 3.1
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After succes…
-
Low 3.5
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After succes…
-
Low 3.5
isoftforce Dreamer CMS cross site scripting
A vulnerability has been found in isoftforce Dreamer CMS up to 4.0.1 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed t…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…