Skip to content
OpenAdvisories

Archive

February 2023

Vulnerabilities first published in this month (UTC), newest first.

← January 2023 2023 / February March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

94 results · Clear filters · Feed

  • Low 3.5
    CVE-2017-20177

    WangGuard Plugin WGG User List wangguard-user-info.php wangguard_users_info cross site scripting

    A vulnerability, which was classified as problematic, has been found in WangGuard Plugin 1.8.0 on WordPress. Affected by this issue is the function wangguard_users_info of the file wangguard-user-info.php of the component WGG User List Handler. The manipulati…

  • Low 3.5
    CVE-2015-10073

    tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting

    A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file WikiSEO.body.php of the component Meta Property Tag Handler. The manipulation of the argument content le…

    tinymighty WikiSEO tinymighty/wiki-seo Packagist
  • Low 2.0
    CVE-2023-23944

    Nexcloud Mail app temporarily stores cleartext password in database

    Nextcloud mail is an email app for the nextcloud home server platform. In versions prior to 2.2.2 user's passwords were stored in cleartext in the database during the duration of OAuth2 setup procedure. Any attacker or malicious user with access to the databa…

    Nextcloud security-advisories
  • Low 3.5
    CVE-2022-4902

    eXo Chat Application Mention ExoChatMessageComposer.vue cross site scripting

    A vulnerability classified as problematic has been found in eXo Chat Application. Affected is an unknown function of the file application/src/main/webapp/vue-app/components/ExoChatMessageComposer.vue of the component Mention Handler. The manipulation leads to…

    eXo Chat Application
  • Low 3.5
    CVE-2017-20176

    ciubotaru share-on-diaspora new_window.php cross site scripting

    A vulnerability classified as problematic was found in ciubotaru share-on-diaspora 0.7.9. This vulnerability affects unknown code of the file new_window.php. The manipulation of the argument title/url leads to cross site scripting. The attack can be initiated…

    ciubotaru share-on-diaspora
  • Low 2.6
    CVE-2017-20175

    DaSchTour matomo-mediawiki-extension Username Piwik.hooks.php cross site scripting

    A vulnerability classified as problematic has been found in DaSchTour matomo-mediawiki-extension up to 2.4.2 on MediaWiki. This affects an unknown part of the file Piwik.hooks.php of the component Username Handler. The manipulation leads to cross site scripti…

    DaSchTour matomo-mediawiki-extension mediawiki/matomo Web / CMS Packagist
  • Low 3.5
    CVE-2018-25080 Public exploit

    MobileDetect Example session_example.php initLayoutType cross site scripting

    A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.31. This issue affects the function initLayoutType of the file examples/session_example.php of the component Example. The manipulation of the argument $_SERVER['PHP_SELF'…

    mobiledetect/mobiledetectlib Packagist
  • Low 3.5
    CVE-2015-10072

    NREL api-umbrella-web Flash Message cross site scripting

    A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. Upgrading…

    NREL api-umbrella-web
  • Low —
    GHSA-4q83-7cq4-p6wg

    `tokio::io::ReadHalf<T>::unsplit` is Unsound

    `tokio::io::ReadHalf<T>::unsplit` can violate the `Pin` contract The soundness issue is described in the [tokio/issues#5372](https://github.com/tokio-rs/tokio/issues/5372) Specific set of conditions needed to trigger an issue (a !Unpin type in ReadHalf) is un…

    tokio crates.io
  • Low 2.4
    CVE-2023-0676 Scanner template

    Cross-site Scripting (XSS) - Reflected in phpipam/phpipam

    Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1.

    phpipam phpipam/phpipam
  • Low 3.5
    CVE-2023-0650

    YAFNET Signature cross site scripting

    A vulnerability was found in YAFNET up to 3.1.11 and classified as problematic. This issue affects some unknown processing of the component Signature Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit ha…

  • Low 3.7
    CVE-2023-0641

    PHPGurukul Employee Leaves Management System changepassword.php weak password

    A vulnerability was found in PHPGurukul Employee Leaves Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file changepassword.php. The manipulation of the argument newpassword/confirm…

    PHPGurukul Employee Leaves Management System
  • Low 2.4
    CVE-2023-0639

    TRENDnet TEW-652BRP Web Management Interface get_set.ccp cross site scripting

    A vulnerability was found in TRENDnet TEW-652BRP 3.04b01 and classified as problematic. This issue affects some unknown processing of the file get_set.ccp of the component Web Management Interface. The manipulation of the argument nextPage leads to cross site…

    Trendnet TEW-652BRP
  • Low 3.9
    CVE-2022-3083

    All versions of Landis+Gyr E850 (ZMQ200) are vulnerable to CWE-784: Reliance on Cookies Without Validation and Integrit…

    Landis+Gyr E850 (ZMQ200)