Skip to content
OpenAdvisories

Archive

22 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /22 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-22258

    AEM URL Redirection to Untrusted Site Security feature bypass

    Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitat…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2023-22256

    AEM URL Redirection to Untrusted Site Security feature bypass

    Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authenticated attacker could leverage this vulnerability to redirect users to malicious websites. Exploitat…

    Adobe Experience Manager
  • Medium 5.4
    CVE-2023-22252

    AEM Reflected XSS Arbitrary code execution

    Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may b…

    Adobe Experience Manager
  • Medium 4.3
    CVE-2022-45634

    An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows authenticated attacker to gain …

  • Medium 6.1
    CVE-2022-45004 Public exploit

    Gophish vulnerable to Cross-site Scripting via crafted landing page

    Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

    github.com/gophish/gophish Go