Skip to content
OpenAdvisories

Archive

1 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /1 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

20 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-22503

    Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of …

    Atlassian Confluence Server Confluence Data Center Web / CMS
  • Medium 6.3
    CVE-2023-2451

    SourceCodester Online DJ Management System GET Parameter view_details.php sql injection

    A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/bookings/view_details.php of the component GET Parameter Handler. The manipulation of the arg…

    SourceCodester Online DJ Management System
  • Medium 6.2
    CVE-2022-48186

    A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclo…

    Lenovo Baiying
  • Medium 5.4
    CVE-2022-45801

    Apache StreamPark (incubating): LDAP Injection Vulnerability

    Apache StreamPark 1.0.0 to 2.0.0 have a LDAP injection vulnerability. LDAP Injection is an attack used to exploit web based applications that construct LDAP statements based on user input. When an application fails to properly sanitize user input, it's possib…

    Apache Software Foundation Apache StreamPark (incubating) org.apache.streampark:streampark Maven
  • Medium 6.3
    CVE-2023-25492

    A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined…

    Lenovo XClarity Controller
  • Medium 6.1
    CVE-2023-28092

    A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could resu…

    Hewlett Packard Enterprise (HPE) HPE ProLiant RL300 Gen11
  • Medium 6.3
    CVE-2015-10105

    IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal

    A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function valid_js_identifier of the file ip_blacklist_cloud.php of the component CSV File Import. The manipulation of the argum…

  • Medium 5.4
    CVE-2023-29643

    Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post f…

  • Medium 6.1
    CVE-2023-29641

    editor.md vulnerable to Cross-site Scripting

    Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text.

    editor.md npm
  • Medium 5.4
    CVE-2023-29636

    Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML…

  • Medium 5.7
    CVE-2023-29680

    Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated atta…

  • Medium 5.4
    CVE-2023-29638

    Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548,…

  • Medium 6.1
    CVE-2023-29637

    Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML…

  • Medium 5.4
    CVE-2023-29639

    Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML…

  • Medium 5.7
    CVE-2023-29681

    Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker…

  • Medium 6.5
    CVE-2023-27035 Public exploit

    An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio a…

  • Medium 5.3
    CVE-2023-27108

    An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns …

  • Medium 4.9
    CVE-2023-22924

    A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remo…

    Zyxel NBG-418N v2 firmware Network devices
  • Medium 6.5
    CVE-2023-22923

    A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could al…

    Zyxel NBG-418N v2 firmware Network devices
  • Medium 6.5
    CVE-2023-26987

    An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via cra…