Skip to content
OpenAdvisories

Archive

8 March 2023

Vulnerabilities first published on this day (UTC), newest first.

56 results · Feed

  • High 7.5

    SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the …

  • Critical 9.8

    SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to r…

  • High 8.1

    There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited…

  • Critical 9.8

    In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the ses…

  • Critical 9.8

    SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via th…

  • Medium 5.4

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter …

  • Medium 5.4

    onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module.

  • High 7.5

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.

  • High 7.5

    Bitwarden through 2023.2.1 offers password auto-fill within a cross-domain IFRAME element. NOTE: the vendor's position …

  • Medium 5.4

    A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.…

  • Medium 5.0

    An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 2.0 before 3.0.55, which send…

  • High 8.8

    An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing opera…

  • Critical 9.0

    Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 all…

  • Critical 9.8

    An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitr…

  • Critical 9.8

    Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows a…

  • High 7.5

    REMAP cmd of SVM driver can be used to remap read only memory as read-write, then cause read only memory/file modified.