Skip to content
OpenAdvisories

Archive

16 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /16 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

50 results · Clear filters · Feed

  • Medium 5.9
    CVE-2023-23673

    WordPress I Recommend This Plugin <= 3.8.3 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.

    Harish Chouhan, Themeist I Recommend This
  • Medium 5.0
    CVE-2023-2161

    A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause unauthorized rea…

    Schneider Electric OPC Factory Server (OFS) ICS / OT
  • Medium 6.1
    CVE-2023-2710

    video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting

    The video carousel slider with lightbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.22 due to insufficient input sanitization and output escaping. This makes it possi…

    nik00726 video carousel slider with lightbox Web / CMS
  • Medium 6.1
    CVE-2023-2708

    Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting

    The Video Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘search_term’ parameter in versions up to, and including, 1.0.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthentica…

    nik00726 Video Gallery Web / CMS
  • Medium 4.3
    CVE-2023-29927

    Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileg…

  • Medium 5.4
    CVE-2023-31544

    alkacon-OpenCMS vulnerable to stored Cross-site Scripting

    A stored cross-site scripting (XSS) vulnerability in alkacon-OpenCMS v11.0.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module.

    org.opencms:opencms-core Maven
  • Medium 5.3
    CVE-2023-31678

    Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended.

  • Medium 6.3
    CVE-2023-2730

    Cross-site Scripting (XSS) - Stored in pimcore/pimcore

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

    pimcore pimcore/pimcore pimcore/pimcore Packagist
  • Medium 5.4
    CVE-2023-30452

    The MoroSystems EasyMind - Mind Maps plugin before 2.15.0 for Confluence allows persistent XSS when saving a Mind Map w…

  • Medium 5.4
    CVE-2021-27131

    Moodle vulnerable to stored Cross-site Scripting

    Moodle 3.10.1 is vulnerable to persistent/stored cross-site scripting (XSS) due to the improper input sanitization on the "Additional HTML Section" via "Header and Footer" parameter in /admin/settings.php. This vulnerability is leading an attacker to steal ad…

    moodle/moodle Packagist