Skip to content
OpenAdvisories

Archive

29 March 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-27167 Public exploit

    Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/ab…

  • Medium 5.4
    CVE-2023-26982 Public exploit

    Trudesk v1.2.6 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Tags parameter u…

  • Medium 5.4
    CVE-2022-1274 Public exploit

    HTML Injection in Keycloak Admin REST API

    A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.