Skip to content
OpenAdvisories

Archive

31 March 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-1773 Public exploit

    Rockoa Configuration File webmainConfig.php code injection

    A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiat…

  • Medium 5.3
    CVE-2023-1258 Public exploit

    Flow-X disclosure of sensitive information to unauthenticated users

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0.

  • Medium 6.5
    CVE-2023-27163 Public exploit Scanner template

    request-baskets vulnerable to Server-Side Request Forgery

    request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.