Skip to content
OpenAdvisories

Archive

31 March 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.5

    Chat room membership disclosed via autocompletion in Nextcloud talk

    Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations member list. As a result an attacker could use this vulnerability to gain information about the members of a…

  • Low 3.5

    DataGear Diagram Type cross site scripting

    A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The e…

  • Low 3.5

    SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting

    A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function get_scale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The…