Skip to content
OpenAdvisories

Archive

19 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /19 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 6.5
    CVE-2023-28623

    Unauthorized user can register an account in specific configurations in Zulip

    Zulip is an open-source team collaboration tool with unique topic-based threading. In the event that 1: `ZulipLDAPAuthBackend` and an external authentication backend (any aside of `ZulipLDAPAuthBackend` and `EmailAuthBackend`) are the only ones enabled in `AU…

    zulip zulip
  • Medium 6.1
    CVE-2023-1996

    Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

    A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

    Dassault Systèmes 3DEXPERIENCE
  • Medium 6.3
    CVE-2023-2815

    SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection

    A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid l…

    SourceCodester Online Jewelry Store
  • Medium 6.3
    CVE-2022-47984

    IBM InfoSphere Information Server SQL injection

    IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.

    IBM InfoSphere Information Server
  • Medium 6.2
    CVE-2023-22878

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373.

    IBM InfoSphere Information Server
  • Medium 5.5
    CVE-2023-28529

    IBM InfoSphere Information Server 11.7

    IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…

    IBM InfoSphere Information Server
  • Medium 5.1
    CVE-2023-28950

    IBM MQ information disclosure

    IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358.

    IBM MQ
  • Medium 6.2
    CVE-2023-28514

    IBM MQ information disclosure

    IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack trace. IBM X-Force ID: 250398.

    IBM MQ
  • Medium 6.3
    CVE-2023-28045

    Dell CloudIQ Collector version 1.10.2 contains a missing encryption of sensitive data vulnerability. An attacker with l…

    Dell CloudIQ Collector
  • Medium 5.5
    CVE-2023-2806

    Weaver e-cology API RequestInfoByXml xml external entity reference

    A vulnerability classified as problematic was found in Weaver e-cology up to 9.0. Affected by this vulnerability is the function RequestInfoByXml of the component API. The manipulation leads to xml external entity reference. The associated identifier of this …

    Weaver E-cology
  • Medium 5.4
    CVE-2023-31862

    jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is o…

  • Medium 5.4
    CVE-2023-31757

    DedeCMS up to v5.7.108 is vulnerable to XSS in sys_info.php via parameters 'edit___cfg_powerby' and 'edit___cfg_beian'

  • Medium 6.7
    CVE-2023-31756 Public exploit

    A command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running fir…

  • Medium 5.5
    CVE-2023-30775

    A vulnerability was found in the libtiff library. This security flaw causes a heap buffer overflow in extractContigSamp…

    tiff tiff Debian Ubuntu
  • Medium 5.5
    CVE-2023-26818 Public exploit

    Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLD_INSER…