Skip to content
OpenAdvisories

Archive

8 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /8 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 4.9
    CVE-2023-23760

    Path traversal in GitHub Enterprise Server leading to remote code execution

    A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the Git…

    GitHub Enterprise Server
  • Medium 4.7
    CVE-2023-1276

    SUL1SS_shop Order.php sql injection

    A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file application\merch\controller\Order.php. The manipulation of the argument keyword leads to sql injection. The attack may be…

  • Medium 4.4
    CVE-2023-27903

    Incorrect Authorization in Jenkins Core

    Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the default permissions for newly created files when uploading a file parameter through the CLI, potentially allowing attackers with access to …

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 5.3
    CVE-2023-27904

    Information disclosure through error stack traces related to agents

    Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connections are broken, potentially revealing information about Jenkins configuration that is otherwise inaccessible to attackers.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.3
    CVE-2023-27902

    Incorrect Permission Preservation in Jenkins Core

    Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows attackers with Item/Workspace permission to access their contents.

    Jenkins Project Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  • Medium 4.6
    CVE-2022-46752

    Dell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploi…

    Dell CPG BIOS
  • Medium 5.0
    CVE-2023-23638 Public exploit

    Apache Dubbo Deserialization Vulnerability Gadgets Bypass

    A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x …

    Apache Software Foundation Apache Dubbo org.apache.dubbo:dubbo Maven
  • Medium 6.5
    CVE-2023-1269

    Use of Hard-coded Credentials in alextselegidis/easyappointments

    Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0.

    Alex Tselegidis alextselegidis/easyappointments alextselegidis/easyappointments Packagist
  • Medium 5.1
    CVE-2023-1270

    Cross-site Scripting in btcpayserver/btcpayserver

    Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3.

    BTCPay Server btcpayserver/btcpayserver
  • Medium 5.4
    CVE-2023-24282

    An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a cr…

  • Medium 6.1
    CVE-2023-24657 Public exploit Scanner template

    phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass paramete…

  • Medium 5.4
    CVE-2023-26950

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter …

  • Medium 5.4
    CVE-2023-26952

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.

  • Medium 5.4
    CVE-2022-4007

    A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.0
    CVE-2022-4315

    An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which send…

    GitLab GitLab Web / CMS