Archive
19 February 2023
Vulnerabilities first published on this day (UTC), newest first.
9 results · Feed
-
Low 2.5
doomsider shadow denial of service
A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitabil…
-
Medium 5.5
java-xmlbuilder xml external entity reference
A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. Th…
-
Low 3.5
madgicweb BuddyStream Plugin ShareBox.php cross site scripting
A vulnerability was found in madgicweb BuddyStream Plugin up to 3.2.7 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file ShareBox.php. The manipulation of the argument content/link/shares …
-
Medium 6.3
codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload
A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The att…
-
High 7.3
SourceCodester Simple Customer Relationship Management System login.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. …
-
Medium 6.3CVE-2023-0916 Public exploit
SourceCodester Auto Dealer Management System Users.php access control
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attac…
-
Medium 6.3CVE-2023-0915 Public exploit
SourceCodester Auto Dealer Management System sql injection
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possib…
-
Medium 4.3
Improper Authorization in pixelfed/pixelfed
Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.
-
High 8.1
Missing Authentication for Critical Function in kareadita/kavita
Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0.