Archive
March 2023
Vulnerabilities first published in this month (UTC), newest first.
145 results · Clear filters · Feed
-
Low 3.5
Chat room membership disclosed via autocompletion in Nextcloud talk
Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations member list. As a result an attacker could use this vulnerability to gain information about the members of a…
-
Low 3.5
DataGear Diagram Type cross site scripting
A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The e…
-
Low 3.5
SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting
A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function get_scale of the file Master.php. The manipulation of the argument perc leads to cross site scripting. The…
-
Low 3.5
Dreamer CMS File Upload cross site scripting
A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB…
-
Low 3.5
SourceCodester Grade Point Average GPA Calculator index.php cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initi…
-
Low 3.5
Insecure randomness for default password in nextcloud
Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak complexity random number generator, so when the sharer did not change it the password could be guessable …
-
Low 2.4
Unrestricted filenames for logo or favicon as admin in the theming settings in nextcloud server
Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Administrato…
-
Low 3.8
WordPress GTmetrix for WordPress Plugin <= 0.4.5 is vulnerable to Cross Site Scripting (XSS)
Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.
-
Low 3.5
SourceCodester Earnings and Expense Tracker App cross site scripting
A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullnam…
-
Low 3.5
SourceCodester Earnings and Expense Tracker App cross site scripting
A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The…
-
Low 3.5
SourceCodester Earnings and Expense Tracker App cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is pos…
-
Low 3.5
SourceCodester Simple Task Allocation System cross site scripting
A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=register_user. The manipulation of the argument Fullname leads to cross site scri…
-
Low 3.5
SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting
A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The man…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Micro…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View …
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Micro…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley Micro…
-
Low 2.7
QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS h…
-
Low 2.7
QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)
A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS h…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Edi…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange E…
-
Low 2.5CVE-2022-43650 EPSS 23%
This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Rea…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDR…
-
Low 3.3
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Corel CorelDR…