Skip to content
OpenAdvisories

Archive

31 May 2023

Vulnerabilities first published on this day (UTC), newest first.

← April 2023 2023 / May /31 June 2023 →
  1. 139
  2. 281
  3. 378
  4. 487
  5. 542
  6. 69
  7. 74
  8. 8185
  9. 9252
  10. 10210
  11. 11101
  12. 1290
  13. 13 
  14. 1411
  15. 15147
  16. 1695
  17. 1757
  18. 1891
  19. 1927
  20. 2023
  21. 217
  22. 2284
  23. 2399
  24. 2486
  25. 2578
  26. 2688
  27. 2724
  28. 2834
  29. 2934
  30. 30151
  31. 31120
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2023-3017

    SourceCodester Lost and Found Information System Manage User Page cross site scripting

    A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the file admin/?page=user/manage_user of the component Manage User Page. The manipulation of the argument…

    SourceCodester Lost and Found Information System
  • Low 3.7
    CVE-2023-2758

    Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service

    A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration files, a remote, unauthenticated attacker may deny logins for an extended period of time.

    Contec CONPROSYS HMI System
  • Low 3.5
    CVE-2023-3016

    yiwent Vip Video Analysis admincore.php cross site scripting

    A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely…

    yiwent Vip Video Analysis
  • Low 3.5
    CVE-2023-3014

    BeipyVideoResolution admincore.php cross site scripting

    A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. T…

  • Low 3.5
    CVE-2023-3005

    SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown part of the file /admin/ajax.php?action=save_area of the component POST Parameter Handler. The manipul…

    SourceCodester Local Service Search Engine Management System
  • Low 3.8
    CVE-2023-2434

    Nested Pages <= 3.2.3 - Missing Authorization to Authenticated (Editor+) Plugin Settings Reset

    The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, and including, 3.2.3. This makes it possible for authenticated attackers, with editor-level permissio…

    Kyle Phillips Nested Pages Web / CMS
  • Low 3.5
    CVE-2015-10107

    Simplr Registration Form Plus+ Plugin cross site scripting

    A vulnerability was found in Simplr Registration Form Plus+ Plugin up to 2.3.4 on WordPress and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrad…

  • Low 2.4
    CVE-2014-125103

    BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting

    A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function twttr_settings_page of the file twitter.php. The manipulation of the argument twttr_url_twitt…

    bestwebsoft Twitter Plugin