Skip to content
OpenAdvisories

Archive

9 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /9 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Low 3.7
    CVE-2023-32312

    Client secret not mandatory in UmbracoIdentityExtensions

    UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected versions client secrets are not required which may expose some endpoints to untrusted actors. Since Umbraco is not a si…

    umbraco UmbracoIdentityExtensions
  • Low 2.4
    CVE-2023-3184 Public exploit

    SourceCodester Sales Tracker Management System cross site scripting

    A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlenam…

    SourceCodester Sales Tracker Management System
  • Low 3.5
    CVE-2023-3183

    SourceCodester Performance Indicator System addproduct.php cross site scripting

    A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to…

    SourceCodester Performance Indicator System
  • Low 3.7
    CVE-2023-2897

    Brizy Page Builder <= 2.4.18 - IP Address Spoofing to Protection Mechanism Bypass

    The Brizy Page Builder plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.4.18. This is due to an implicit trust of user-supplied IP addresses in an 'X-Forwarded-For' HTTP header for the purpose of validating allowed…

    themefusecom Brizy – Page Builder Web / CMS
  • Low 3.1
    CVE-2023-2599

    Active Directory Integration / LDAP Integration <= 4.1.4 - Cross-Site Request Forgery to SQL Injection

    The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order parameters in versions up to, and including, 4.1.4 due to missing nonce verification on the get_use…

    cyberlord92 Active Directory Integration / LDAP Integration Web / CMS
  • Low 3.1
    CVE-2023-0342 Public exploit

    MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive

    MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12

    MongoDB MongoDB Ops Manager