Skip to content
OpenAdvisories

Archive

23 June 2023

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Low 3.1

    Shescape potential environment variable exposure on Windows with CMD

    Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched in version 1.7.1.

  • Low 3.5

    Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit t…

  • Low 3.5

    SourceCodester Game Result Matrix System GET Parameter save-delegates.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown functionality of the file /dipam/save-delegates.php of the component GET Parameter Handler. The manipu…

  • Low 3.5

    SourceCodester Online School Fees System GET Parameter datatable.php cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality of the file /paysystem/datatable.php of the component GET Parameter Handler. The manipulation of th…

  • Low 2.7

    Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged rem…

  • Low 3.4

    Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A r…

  • Low 3.0

    HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization

    A permission issue in BigFix WebUI Insights site version 14 allows an authenticated, unprivileged operator to access an administrator page.

  • Low 3.3

    An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ve…