Skip to content
OpenAdvisories

Archive

19 February 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 5.5

    java-xmlbuilder xml external entity reference

    A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to xml external entity reference. Upgrading to version 1.2 is able to address this issue. Th…

  • Medium 6.3

    codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload

    A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The att…

  • Medium 6.3
    CVE-2023-0916 Public exploit

    SourceCodester Auto Dealer Management System Users.php access control

    A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attac…

  • Medium 6.3
    CVE-2023-0915 Public exploit

    SourceCodester Auto Dealer Management System sql injection

    A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possib…

  • Medium 4.3

    Improper Authorization in pixelfed/pixelfed

    Improper Authorization in GitHub repository pixelfed/pixelfed prior to 0.11.4.