Skip to content
OpenAdvisories

Archive

14 June 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.0

    Microsoft Power Apps Spoofing Vulnerability

    Microsoft Power Apps Spoofing Vulnerability

  • Low 3.7

    Out of Bounds Access Leading to Undefined Behavior

    A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access bug that could have allowed an attacker to launch a DoS if the function was used to parse untrusted i…

  • Low 3.5

    OTCMS path traversal

    A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/read.php?mudi=announContent. The manipulation of the argument url leads to path traversal. The exploit has bee…

  • Low 3.5

    OTCMS usersNews_deal.php path traversal

    A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersNews_deal.php. The manipulation of the argument file leads to path traversal: '../filedir'. The explo…

  • Low 3.5

    OTCMS path traversal

    A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQrCode. The manipulation of the argument img leads to path traversal: '../filedir'. The exploit has be…

  • Low 3.1

    UJCMS ZIP Package information disclosure

    A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler. The manipulation of the argument dir leads to information disclosure. The attack can be initiated …

  • Low 3.5

    SourceCodester Online School Fees System POST Parameter branch.php cross site scripting

    A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /paysystem/branch.php of the component POST Parameter Handler. The manipulation of the argument branch le…