Skip to content
OpenAdvisories

Archive

13 February 2023

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.5

    juju2143 WalrusIRC parser.js parseLinks cross site scripting

    A vulnerability was found in juju2143 WalrusIRC 0.0.2. It has been rated as problematic. This issue affects the function parseLinks of the file public/parser.js. The manipulation of the argument text leads to cross site scripting. The attack may be initiated …

  • Low 3.5

    UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting

    A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setup_wizard_interface of the file lib/classes/class-settings.php. The manipulation of the argument settin…

  • Low 3.7

    Nextcloud Server's missing rate limiting on password reset functionality allows sending lots of emails

    Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise Server prior to versions 25.0.1 24.0.8, and 23.0.12 missing rate limiting on password reset functionality. This could re…

  • Low 2.3

    Nextcloud Server previews are accessible without a watermark

    Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Office is a document collaboration app for the same platform. Nextcloud Server 24.0.x prior to 24.0.8 and 25.0.x prior to 25.0.1, Nextcloud Enterpri…

  • Low 3.9

    Deye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password

    A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 123456…

  • Low 2.2

    Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent…