Skip to content
OpenAdvisories

Archive

29 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /29 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.3
    CVE-2014-125102

    Bestwebsoft Relevant Plugin Thumbnail information disclosure

    A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown functionality of the component Thumbnail Handler. The manipulation leads to information disclosure. The a…

    bestwebsoft Relevant Plugin
  • Medium 4.8
    CVE-2023-32072

    Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job

    Tuleap is an open source tool for end to end traceability of application and system developments. Tuleap Community Edition prior to version 14.8.99.60 and Tuleap Enterprise edition prior to 14.8-3 and 14.7-7, the logs of the triggered Jenkins job URLs are not…

    Enalean tuleap
  • Medium 6.5
    CVE-2023-23699

    WordPress Progress Bar Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Chris Reynolds Progress Bar plugin <= 2.2.1 versions.

    Chris Reynolds Progress Bar
  • Medium 4.7
    CVE-2023-2962

    SourceCodester Faculty Evaluation System sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Faculty Evaluation System 1.0. Affected by this issue is some unknown functionality of the file index.php?page=edit_user. The manipulation of the argument id leads to sql inje…

    SourceCodester Faculty Evaluation System
  • Medium 4.3
    CVE-2023-2808

    Lack of URL normalization allows rendering previews for disallowed domains

    Mattermost fails to normalize UTF confusable characters when determining if a preview should be generated for a hyperlink, allowing an attacker to trigger link preview on a disallowed domain using a specially crafted link.

    Mattermost Mattermost
  • Medium 6.3
    CVE-2023-2955

    SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file rendered_report.php of the component GET Parameter Handler. The manipulation of the arg…

    SourceCodester Students Online Internship Timesheet System
  • Medium 4.3
    CVE-2022-45372

    WordPress Product Gallery Slider for WooCommerce Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Codeixer Product Gallery Slider for WooCommerce plugin <= 2.2.8 versions.

    Codeixer Product Gallery Slider for WooCommerce Web / CMS
  • Medium 5.4
    CVE-2022-33974

    WordPress Custom Twitter Feeds (Tweets Widget) Plugin <= 1.8.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Smash Balloon Custom Twitter Feeds (Tweets Widget) plugin <= 1.8.4 versions.

    Smash Balloon Custom Twitter Feeds (Tweets Widget)
  • Medium 5.9
    CVE-2020-29547

    An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3…

    citadel Ubuntu
  • Medium 6.4
    CVE-2023-28153

    An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child c…

  • Medium 4.2
    CVE-2023-24605

    OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading co…

  • Medium 6.5
    CVE-2023-24603

    OX App Suite before backend 7.10.6-rev37 does not check size limits when downloading, e.g., potentially allowing a craf…

  • Medium 4.3
    CVE-2023-24604

    OX App Suite before backend 7.10.6-rev37 does not check HTTP header lengths when downloading, e.g., potentially allowin…

  • Medium 4.8
    CVE-2023-2954

    Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog

    Cross-site Scripting (XSS) - Stored in GitHub repository liangliangyy/djangoblog prior to master.

    liangliangyy liangliangyy/djangoblog