Skip to content
OpenAdvisories

Archive

30 June 2023

Vulnerabilities first published on this day (UTC), newest first.

← May 2023 2023 / June /30 July 2023 →
  1. 177
  2. 2143
  3. 321
  4. 47
  5. 573
  6. 6149
  7. 7185
  8. 840
  9. 9118
  10. 104
  11. 118
  12. 1284
  13. 13187
  14. 14120
  15. 1596
  16. 1679
  17. 179
  18. 1813
  19. 19116
  20. 2064
  21. 2132
  22. 22112
  23. 23192
  24. 245
  25. 2510
  26. 2695
  27. 2777
  28. 28160
  29. 2965
  30. 3083
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low —
    GHSA-w5w5-2882-47pc

    github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee

    # x/crisis does not charge ConstantFee ### Impact If a transaction is sent to the `x/crisis` module to check an invariant, the ConstantFee parameter of the chain is NOT charged. All versions of the `x/crisis` module are affected on all versions of the Cosmos …

    github.com/cosmos/cosmos-sdk Go
  • Low —
    GHSA-g98v-hv3f-hcfr

    atty potential unaligned read

    On windows, `atty` dereferences a potentially unaligned pointer. In practice however, the pointer won't be unaligned unless a custom global allocator is used. In particular, the `System` allocator on windows uses `HeapAlloc`, which guarantees a large enough a…

    atty crates.io
  • Low 3.0
    CVE-2023-3485

    Insecure Default Authorization in Temporal Server

    Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other than the one specified in the request. Creation of this task token must be done outside of the norm…

    Temporal Technologies Temporal Server go.temporal.io/server Go
  • Low 3.5
    CVE-2023-3477

    RocketSoft Rocket LMS Contact Form store cross site scripting

    A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store of the component Contact Form. The manipulation of the argument name/subject/message leads to cross…

    Rocketsoft Rocket LMS
  • Low 3.5
    CVE-2023-3476

    SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting

    A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. It is possi…

    Simplephpscripts GuestBook Script
  • Low 3.5
    CVE-2023-3475

    SimplePHPscripts Event Script URL Parameter preview.php cross site scripting

    A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. …

    Simplephpscripts Event Script
  • Low 3.5
    CVE-2023-3474

    SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting

    A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file preview.php of the component URL Parameter Handler. The manipulation leads to cross site s…

    Simplephpscripts Simple Blog