Skip to content
OpenAdvisories

Archive

30 March 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2023-26482 Public exploit

    Scope of workflow operations is not validated in nextcloud server

    Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defin…

  • Medium 6.1
    CVE-2023-26692 Public exploit

    ZCBS Zijper Collectie Beheer Systeem (ZCBS), Zijper Publication Management System (ZPBS), and Zijper Image Bank Managem…