Skip to content
OpenAdvisories

Archive

21 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /21 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-0271

    WP Font Awesome < 1.7.9 - Contributor+ Stored XSS

    The WP Font Awesome WordPress plugin before 1.7.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embedded, which could allow users with the contributor role and above to perform …

    Web / CMS
  • Medium 5.4
    CVE-2023-0380

    Easy Digital Downloads < 3.1.0.5 - Contributor+ Stored XSS

    The Easy Digital Downloads WordPress plugin before 3.1.0.5 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Store…

    Web / CMS
  • Medium 5.5
    CVE-2015-10082

    UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference

    A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The patch is named c086c…

    UIKit0 libplist
  • Medium 6.3
    CVE-2023-0934

    Cross-site Scripting (XSS) - Stored in answerdev/answer

    Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.5.

    answerdev answerdev/answer github.com/answerdev/answer Go
  • Medium 5.4
    CVE-2023-24081

    Multiple stored cross-site scripting (XSS) vulnerabilities in Redrock Software TutorTrac before v4.2.170210 allows atta…

  • Medium 6.5
    CVE-2023-23009

    Libreswan 4.9 allows remote attackers to cause a denial of service (assert failure and daemon restart) via crafted TS p…

    libreswan libreswan libreswan Debian Ubuntu Alpine
  • Medium 5.3
    CVE-2023-26265

    The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a UR…

  • Medium 6.5
    CVE-2023-26267

    php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XM…