Skip to content
OpenAdvisories

Archive

7 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /7 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.5
    CVE-2023-2565

    SourceCodester Multi Language Hotel Management Software POST Parameter ajax.php cross site scripting

    A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument…

    SourceCodester Multi Language Hotel Management Software
  • High 7.5
    CVE-2023-32290

    The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server.

  • Critical 9.8
    CVE-2023-31047

    Django bypasses validation when using one form field to upload multiple files

    In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

    python-django django python-django Debian Ubuntu PyPI
  • Critical 10.0
    CVE-2023-2564 EPSS 41%

    OS Command Injection in sbs20/scanservjs

    OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.

    sbs20 sbs20/scanservjs