Skip to content
OpenAdvisories

Archive

7 July 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.6
    CVE-2023-37270 Scanner template

    Piwigo SQL Injection vulnerability in "User-Agent"

    Piwigo is open source photo gallery software. Prior to version 13.8.0, there is a SQL Injection vulnerability in the login of the administrator screen. The SQL statement that acquires the HTTP Header `User-Agent` is vulnerable at the endpoint that records use…

  • High 7.8

    Incorrect Default Permissions vulnerability in the openSUSE Tumbleweed hawk2 package allows users with access to the ha…

  • High 8.5

    Cross-site Scripting (XSS) - Stored in outline/outline

    Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.