Skip to content
OpenAdvisories

Archive

21 April 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.6
    CVE-2023-1998 Public exploit

    Spectre v2 SMT mitigations problem in Linux kernel

    The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud provider, the kernel sti…

  • Medium 6.3
    CVE-2023-2215 Public exploit

    Campcodes Coffee Shop POS System manage_user.php sql injection

    A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the at…

  • High 8.8
    CVE-2023-26876 Public exploit

    SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via …

  • Medium 6.1
    CVE-2022-48150 Public exploit

    Shopware vulnerable to cross-site scripting (XSS)

    Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI.