Skip to content
OpenAdvisories

Archive

12 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /12 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.8
    CVE-2016-15028

    ICEPAY REST-API-NET Checksum Validation RestClient.cs RestClient integrity check

    A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerability is the function RestClient of the file Classes/RestClient.cs of the component Checksum Validation. The manipulation leads to improper val…

    ICEPAY REST-API-NET
  • Medium 4.7
    CVE-2023-1360

    SourceCodester Employee Payslip Generator with Sending Mail New User Creation sql injection

    A vulnerability was found in SourceCodester Employee Payslip Generator with Sending Mail 1.2.0 and classified as critical. This issue affects some unknown processing of the file classes/Users.php?f=save of the component New User Creation. The manipulation of …

    SourceCodester Employee Payslip Generator with Sending Mail
  • Medium 6.3
    CVE-2023-1358

    SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Gadget Works Online Ordering System 1.0. This affects an unknown part of the file /philosophy/admin/login.php of the component POST Parameter Handler. The manipulation of the argum…

    SourceCodester Gadget Works Online Ordering System
  • Medium 6.1
    CVE-2021-46875

    Cross-site scripting in eZ Platform Kernel

    An issue was discovered in eZ Platform Ibexa Kernel before 1.3.1.1. An XSS attack can occur because JavaScript code can be uploaded in a .html or .js file.

    ezsystems/ezpublish-kernel ezsystems/ezplatform-kernel Packagist
  • Medium 5.3
    CVE-2021-46876

    /user/sessions endpoint allows detecting valid accounts

    An issue was discovered in eZ Publish Ibexa Kernel before 7.5.15.1. The /user/sessions endpoint can be abused to determine account existence.

    ezsystems/ezpublish-kernel Packagist