Skip to content
OpenAdvisories

Archive

5 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /5 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.5
    CVE-2022-4927

    ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing

    A vulnerability was found in ualbertalib NEOSDiscovery 1.0.70 and classified as problematic. This issue affects some unknown processing of the file app/views/bookmarks/_refworks.html.erb. The manipulation leads to use of web link to untrusted target with wind…

    ualbertalib NEOSDiscovery
  • Medium 5.5
    CVE-2021-4329

    json-logic-js logic.js command injection

    A vulnerability, which was classified as critical, has been found in json-logic-js 2.0.0. Affected by this issue is some unknown functionality of the file logic.js. The manipulation leads to command injection. Upgrading to version 2.0.1 is able to address thi…

    json-logic-js npm
  • Medium 5.0
    CVE-2015-10088

    ayttm proxy.c http_connect format string

    A vulnerability, which was classified as critical, was found in ayttm up to 0.5.0.89. This affects the function http_connect in the library libproxy/proxy.c. The manipulation leads to format string. It is possible to initiate the attack remotely. The complexi…

    ayttm Ubuntu
  • Medium 6.3
    CVE-2008-10003

    iGamingModules flashgames game.php sql injection

    A vulnerability was found in iGamingModules flashgames 1.1.0. It has been classified as critical. Affected is an unknown function of the file game.php. The manipulation of the argument lid leads to sql injection. It is possible to launch the attack remotely. …

    iGamingModules flashgames
  • Medium 5.4
    CVE-2023-1181

    Cross-site Scripting (XSS) - Stored in icret/easyimages2.0

    Cross-site Scripting (XSS) - Stored in GitHub repository icret/easyimages2.0 prior to 2.6.7.

    icret icret/easyimages2.0
  • Medium 6.1
    CVE-2023-22432 Public exploit Scanner template

    Open redirect in web2py

    Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack.

    web2py web2py web2py web2py Ubuntu PyPI
  • Medium 5.4
    CVE-2023-22438

    Cross-site scripting vulnerability in Contents Management of EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0…

    EC-CUBE EC-CUBE 4 series, EC-CUBE 3 series, and EC-CUBE 2 series