Skip to content
OpenAdvisories

Archive

7 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /7 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 1.8
    CVE-2023-24476

    PTC Vuforia Studio Improper Authorization

    An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the user or session are valid.

    PTC Vuforia Studio
  • Low 3.7
    CVE-2023-29168

    PTC Vuforia Studio Insufficiently Protected Credentials

    The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.

    PTC Vuforia Studio
  • Low 3.7
    CVE-2023-33849

    IBM CICS TX information disclosure

    IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters that could be intercepted using man in the middle techniques. IBM X-Force ID: 257105.

    IBM CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms
  • Low 3.5
    CVE-2023-3144

    SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functionality of the file admin\posts\manage_post.php. The manipulation of the argument title leads to cross s…

    SourceCodester Online Discussion Forum Site
  • Low 3.5
    CVE-2023-3143

    SourceCodester Online Discussion Forum Site manage_post.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is an unknown function of the file admin\posts\manage_post.php. The manipulation of the argument content leads to cross site scripting. It is…

    SourceCodester Online Discussion Forum Site
  • Low 3.1
    CVE-2023-0508

    Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. Open redirection was possible via HTTP response splitting in…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2023-1825

    Insertion of Sensitive Information Into Sent Data in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 before 16.0.2. It was possible to disclose issue notes to an unauthorized user…

    GitLab GitLab Web / CMS
  • Low 3.8
    CVE-2023-3142

    Cross-site Scripting (XSS) - Stored in microweber/microweber

    Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 2.0.

    microweber microweber/microweber microweber/microweber Packagist
  • Low 2.6
    CVE-2023-2013

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions star…

    GitLab GitLab gitlab Web / CMS Ubuntu