Skip to content
OpenAdvisories

Archive

2 May 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2023-30861 Public exploit

    Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

    Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` he…

  • High 8.1
    CVE-2023-31435 Public exploit

    Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire …

  • High 8.8
    CVE-2023-31433 Public exploit

    A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated att…

  • High 8.8
    CVE-2022-47875 Public exploit EPSS 10%

    A Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to e…