Skip to content
OpenAdvisories

Archive

30 March 2023

Vulnerabilities first published on this day (UTC), newest first.

← February 2023 2023 / March /30 April 2023 →
  1. 184
  2. 258
  3. 356
  4. 48
  5. 526
  6. 6101
  7. 7170
  8. 856
  9. 959
  10. 1069
  11. 118
  12. 1211
  13. 1383
  14. 14163
  15. 1578
  16. 16109
  17. 1757
  18. 1823
  19. 1914
  20. 2062
  21. 2180
  22. 2285
  23. 23141
  24. 24202
  25. 2513
  26. 2615
  27. 27181
  28. 28149
  29. 29233
  30. 3065
  31. 3160
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-1746

    Dreamer CMS File Upload cross site scripting

    A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB…

  • Low 3.5
    CVE-2023-1743

    SourceCodester Grade Point Average GPA Calculator index.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initi…

    SourceCodester Grade Point Average GPA Calculator
  • Low 3.5
    CVE-2023-28835

    Insecure randomness for default password in nextcloud

    Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be guessable …

    Nextcloud security-advisories
  • Low 2.4
    CVE-2023-28833

    Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server

    Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Administrato…

    Nextcloud security-advisories
  • Low 3.8
    CVE-2023-23677

    WordPress GTmetrix for WordPress Plugin <= 0.4.5 is vulnerable to Cross Site Scripting (XSS)

    Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.

    GTmetrix GTmetrix for WordPress Web / CMS