Skip to content
OpenAdvisories

Archive

4 February 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2018-25080 Public exploit

    MobileDetect Example session_example.php initLayoutType cross site scripting

    A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.31. This issue affects the function initLayoutType of the file examples/session_example.php of the component Example. The manipulation of the argument $_SERVER['PHP_SELF'…

  • Low 3.5

    NREL api-umbrella-web Flash Message cross site scripting

    A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading…

  • Low —

    `tokio::io::ReadHalf<T>::unsplit` is Unsound

    `tokio::io::ReadHalf<T>::unsplit` can violate the `Pin` contract The soundness issue is described in the [tokio/issues#5372](https://github.com/tokio-rs/tokio/issues/5372) Specific set of conditions needed to trigger an issue (a !Unpin type in ReadHalf) is un…

  • Low 2.4
    CVE-2023-0676 Scanner template

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.