Skip to content
OpenAdvisories

Archive

19 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /19 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium 6.3
    CVE-2023-1501

    RockOA acloudCosAction.php.SQL runAction unrestricted upload

    A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack …

  • Low 3.5
    CVE-2023-1500

    code-projects Simple Art Gallery adminHome.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scrip…

    code-projects Simple Art Gallery
  • Medium 6.3
    CVE-2023-1499

    code-projects Simple Art Gallery adminHome.php sql injection

    A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can …

    code-projects Simple Art Gallery
  • Medium 6.3
    CVE-2023-1498 Public exploit

    code-projects Responsive Hotel Site Newsletter Log messages.php sql injection

    A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. …

    code-projects Responsive Hotel Site
  • Medium 6.3
    CVE-2023-1497

    SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload

    A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. Th…

    SourceCodester Simple and Nice Shopping Cart Script
  • High 7.8
    CVE-2023-28617

    org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary co…

    xemacs21-packages xemacs21 emacs25 emacs24 Debian Ubuntu Azure Linux
  • Medium 6.5
    CVE-2023-1496 Scanner template

    Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

    Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

    imgproxy imgproxy/imgproxy github.com/imgproxy/imgproxy/v3 github.com/imgproxy/imgproxy Go
  • Critical 9.8
    CVE-2023-26905

    An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue …

  • Critical 9.8
    CVE-2023-26805

    Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function fo…

  • Critical 9.8
    CVE-2023-26806

    Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTi…

  • High 7.8
    CVE-2022-48422

    ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse lib…

  • High 7.8
    CVE-2022-48424

    In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2022-48423

    In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2022-48425

    In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu