Skip to content
OpenAdvisories

Archive

29 April 2023

Vulnerabilities first published on this day (UTC), newest first.

← March 2023 2023 / April /29 May 2023 →
  1. 119
  2. 211
  3. 346
  4. 4165
  5. 5139
  6. 6111
  7. 799
  8. 820
  9. 915
  10. 1078
  11. 11239
  12. 12105
  13. 1342
  14. 14111
  15. 1565
  16. 1638
  17. 1786
  18. 18191
  19. 1994
  20. 2054
  21. 2161
  22. 2231
  23. 2326
  24. 24114
  25. 2599
  26. 2659
  27. 2772
  28. 28111
  29. 2913
  30. 303
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-2424

    DedeCMS config.php UpDateMemberModCache unrestricted upload

    A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The e…

  • Medium 4.6
    CVE-2022-43871

    IBM Financial Transaction Manager for SWIFT Services cross-site scripting

    IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc…

    IBM Financial Transaction Manager for SWIFT Services
  • Medium 6.1
    CVE-2023-30792

    Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link c…

    Meta Platforms Lexical
  • Medium 6.3
    CVE-2023-2420

    MLECMS common.func.php get_url sql injection

    A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the library /upload/inc/lib/admin of the file upload\inc\include\common.func.php. The manipulation of the argument $_SERVER['REQUEST_URI'] leads…

  • Medium 4.7
    CVE-2023-2419

    Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload

    A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the function videoUpload of the file \crmeb\app\services\system\attachment\SystemAttachmentServices.php. The manipulation of the argument filenam…

    Zhong Bang CRMEB
  • Medium 5.3
    CVE-2023-2417

    ks-soft Advanced Host Monitor rma_active.exe unquoted search path

    A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files (x86)\HostMonitor\RMA-Win\rma_active.exe. The manipulation leads to unquote…

    Ks-Soft Advanced Host Monitor
  • Medium 6.3
    CVE-2023-2413

    SourceCodester AC Repair and Services System manage_booking.php sql injection

    A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bookings/manage_booking.php. The manipulation of the argument id lea…

    SourceCodester AC Repair and Services System
  • Medium 6.8
    CVE-2023-2426

    Use of Out-of-range Pointer Offset in vim/vim

    Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.

    vim vim/vim vim vim Debian Ubuntu Azure Linux