Skip to content
OpenAdvisories

Archive

11 July 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low —

    Vendure Cross Site Request Forgery vulnerability impacting all API requests

    ### Impact Vendure is an e-commerce GraphQL framework with a number of APIs and different levels of authorization. By default the Cookie settings are insecure, having the SameSite setting as false which results in not having one (originates from the cookie-se…

  • Low 3.3

    Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable informati…

  • Low 3.7

    A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versi…

  • Low 3.5

    Exposure of Private Personal Information to an Unauthorized Actor in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all versions starting from 16.1 before 16.1.1, which allows an attacker to leak the email address of a user …