Skip to content
OpenAdvisories

Archive

9 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /9 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Medium 4.3
    CVE-2012-10012

    BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery

    A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcbk_bttn_plgn_settings_page of the file facebook-button-plugin.php. The manipulation leads to cross-si…

    bestwebsoft Facebook Like Button
  • Low 3.5
    CVE-2009-10004

    Turante Sandbox Theme functions.php sandbox_body_class cross site scripting

    A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandbox_body_class of the file functions.php. The manipulation of the argument page leads to cross site scripting. It is possible …

    Turante Sandbox Theme
  • Medium 6.3
    CVE-2012-10011

    HD FLV PLayer Plugin functions.php hd_update_media sql injection

    A vulnerability was found in HD FLV PLayer Plugin up to 1.7 on WordPress. It has been rated as critical. Affected by this issue is the function hd_add_media/hd_update_media of the file functions.php. The manipulation of the argument name leads to sql injectio…

  • High 7.3
    CVE-2023-1964

    PHPGurukul Bank Locker Management System Password Reset recovery.php sql injection

    A vulnerability classified as critical has been found in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file recovery.php of the component Password Reset. The manipulation of the argument uname/mobile leads to sql injecti…

    PHPGurukul Bank Locker Management System
  • Medium 6.3
    CVE-2023-1963

    PHPGurukul Bank Locker Management System Search index.php sql injection

    A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php of the component Search. The manipulation of the argument searchinput leads to sql injec…

    PHPGurukul Bank Locker Management System
  • High 7.3
    CVE-2023-1962

    SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection

    A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/forgot-password.php of the component POST Parameter Handler. The manipulation of the …

    SourceCodester Best Online News Portal
  • Low 3.5
    CVE-2014-125095

    BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting

    A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_menu_render of the file bws_menu/bws_menu.php. The manipulation of the argument bwsmn_form_email lead…

    bestwebsoft Contact Form Plugin
  • Medium 4.3
    CVE-2012-10010

    BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery

    A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file contact_form.php. The manipulation leads to cross-site request forgery. It is possible to initiate …

    bestwebsoft Contact Form
  • Critical 9.8
    CVE-2023-27719

    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows …

  • Critical 9.8
    CVE-2023-27720

    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows …

  • High 7.5
    CVE-2023-27729

    Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.

  • High 7.5
    CVE-2023-27728

    Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_…

  • High 7.5
    CVE-2023-27730

    Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh…

  • Critical 9.8
    CVE-2023-27718

    D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows …

  • High 7.5
    CVE-2023-27727

    Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_fun…