Skip to content
OpenAdvisories

Archive

12 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /12 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Low 3.5
    CVE-2020-36661

    Kong lua-multipart multipart.lua is_header redos

    A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to ve…

    Kong lua-multipart
  • Medium 4.3
    CVE-2019-25103

    simple-markdown simple-markdown.js redos

    A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack c…

    simple-markdown npm
  • Medium 4.3
    CVE-2019-25102

    simple-markdown simple-markdown.js redos

    A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/ leads to inefficient regular expression co…

    simple-markdown npm
  • Low 3.5
    CVE-2015-10078

    atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting

    A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the function send_welcome_email_url of the file resend-welcome-email.php. The manipulation leads to cross site…

    atwellpub Resend Welcome Email Plugin
  • Low 3.7
    CVE-2023-0785

    SourceCodester Best Online News Portal check_availability.php information exposure

    A vulnerability classified as problematic was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file check_availability.php. The manipulation of the argument username leads to exposure of se…

    SourceCodester Best Online News Portal
  • High 7.3
    CVE-2023-0784

    SourceCodester Best Online News Portal Login Page sql injection

    A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to launch the at…

    SourceCodester Best Online News Portal
  • High 8.1
    CVE-2023-0787

    Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.1
    CVE-2023-0789

    Command Injection in thorsten/phpmyfaq

    Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.6
    CVE-2023-0790

    Uncaught Exception in thorsten/phpmyfaq

    Uncaught Exception in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.1
    CVE-2023-0793

    Weak Password Requirements in thorsten/phpmyfaq

    Weak Password Requirements in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.1
    CVE-2023-0788

    Code Injection in thorsten/phpmyfaq

    Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.3
    CVE-2023-0794

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.4
    CVE-2023-0786

    Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Generic in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • Medium 6.5
    CVE-2023-0792

    Code Injection in thorsten/phpmyfaq

    Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 8.3
    CVE-2023-0791

    Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

    Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.11.

    thorsten thorsten/phpmyfaq thorsten/phpmyfaq Packagist
  • High 7.2
    CVE-2023-20076

    Cisco IOx Application Hosting Environment Command Injection Vulnerability

    A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters th…

    Cisco Cisco IOS iOS Network devices