Skip to content
OpenAdvisories

Archive

4 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /4 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • Medium 4.7
    CVE-2014-125091

    codepeople cp-polls Plugin cp-admin-int-message-list.inc.php sql injection

    A vulnerability has been found in codepeople cp-polls Plugin 1.0.1 on WordPress and classified as critical. This vulnerability affects unknown code of the file cp-admin-int-message-list.inc.php. The manipulation of the argument lu leads to sql injection. The …

    codepeople cp-polls Plugin
  • Low 3.5
    CVE-2014-125090

    Media Downloader Plugin getfile.php dl_file_resumable cross site scripting

    A vulnerability was found in Media Downloader Plugin 0.1.992 on WordPress. It has been declared as problematic. This vulnerability affects the function dl_file_resumable of the file getfile.php. The manipulation of the argument file leads to cross site script…

  • Medium 5.5
    CVE-2020-36665

    Artesãos SEOTools TwitterCards.php eachValue redirect

    A vulnerability was found in Artesãos SEOTools up to 0.17.1 and classified as critical. This issue affects the function eachValue of the file TwitterCards.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able …

    Artesãos SEOTools artesaos/seotools Packagist
  • Medium 5.5
    CVE-2020-36664

    Artesãos SEOTools SEOMeta.php setTitle redirect

    A vulnerability has been found in Artesãos SEOTools up to 0.17.1 and classified as problematic. This vulnerability affects the function setTitle of the file SEOMeta.php. The manipulation of the argument title leads to open redirect. Upgrading to version 0.17.…

    Artesãos SEOTools artesaos/seotools Packagist
  • Medium 5.5
    CVE-2020-36663

    Artesãos SEOTools OpenGraph.php makeTag redirect

    A vulnerability, which was classified as problematic, was found in Artesãos SEOTools up to 0.17.1. This affects the function makeTag of the file OpenGraph.php. The manipulation of the argument value leads to open redirect. Upgrading to version 0.17.2 is able …

    Artesãos SEOTools artesaos/seotools Packagist
  • Critical 9.1
    CVE-2023-26481

    Insufficient user check in FlowTokens by Email stage

    authentik is an open-source Identity Provider. Due to an insufficient access check, a recovery flow link that is created by an admin (or sent via email by an admin) can be used to set the password for any arbitrary user. This attack is only possible if a reco…

    goauthentik authentik
  • Medium 5.3
    CVE-2023-25819

    Discourse tags with no visibility are leaking into og:article:tag

    Discourse is an open source platform for community discussion. Tags that are normally private are showing in metadata. This affects any site running the `tests-passed` or `beta` branches >= 3.1.0.beta2. The issue is patched in the latest `beta` and `tests-pas…

    Discourse Discourse
  • High 7.3
    CVE-2023-1175

    Incorrect Calculation of Buffer Size in vim/vim

    Incorrect Calculation of Buffer Size in GitHub repository vim/vim prior to 9.0.1378.

    vim vim/vim vim vim Debian Ubuntu Azure Linux Alpine Wolfi