Skip to content
OpenAdvisories

Archive

24 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /24 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

52 results · Feed

  • Medium 5.4
    CVE-2023-22425

    Stored cross-site scripting vulnerability in Schedule function of SHIRASAGI v1.16.2 and earlier versions allows a remot…

    SHIRASAGI Project SHIRASAGI
  • Medium 4.8
    CVE-2023-22427

    Stored cross-site scripting vulnerability in Theme switching function of SHIRASAGI v1.16.2 and earlier versions allows …

    SHIRASAGI Project SHIRASAGI
  • Medium 6.1
    CVE-2022-48345

    @braintree/sanitize-url Cross-site Scripting vulnerability

    sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.

    node-mermaid @braintree/sanitize-url Ubuntu npm
  • Medium 5.5
    CVE-2022-46440

    ttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.

    swftools Ubuntu
  • High 7.5
    CVE-2022-44310

    ecdh vulnerable to Exposure of Resource to Wrong Sphere

    In Development IL ecdh before 0.2.0, an attacker can send an invalid point (not on the curve) as the public key, and obtain the derived shared secret.

    ecdh npm
  • High 8.8
    CVE-2021-34167

    Cross Site Request Forgery (CSRF) vulnerability in taoCMS 3.0.2 allows remote attackers to gain escalated privileges vi…

  • High 7.5
    CVE-2021-34249

    SQL injection vulnerability in sourcecodester online-book-store 1.0 allows remote attackers to view sensitive informati…

  • Critical 9.6
    CVE-2021-33387

    Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get reques…

  • Unscored —
    CVE-2021-33224

    File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a cra…

  • Unscored —
    CVE-2021-35369

    Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive inf…

  • Unscored —
    CVE-2021-35290

    File Upload vulnerability in balerocms-src 0.8.3 allows remote attackers to run arbitrary code via rich text editor on …

  • Critical 9.8
    CVE-2021-35370

    An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.