Skip to content
OpenAdvisories

Archive

10 August 2023

Vulnerabilities first published on this day (UTC), newest first.

133 results · Feed

  • Unscored —

    There is a Cross Site Scripting (XSS) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creat…

  • Unscored —

    PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting (XSS) via all post parameters of "Export Request…

  • Unscored —

    There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widge…

  • Unscored —

    There is a Cross Site Scripting (XSS) vulnerability in the value-enum-o_bf_include_timezone parameter of index.php in P…

  • Unscored —

    OpenBSD 7.3 before errata 014 is missing an argument-count bounds check in console terminal emulation. This could cause…

  • Unscored —

    HAProxy through 2.0.32, 2.1.x and 2.2.x through 2.2.30, 2.3.x and 2.4.x through 2.4.23, 2.5.x and 2.6.x before 2.6.15, …

  • Unscored —

    MISP 2.4.174 allows XSS in app/View/Events/index.ctp.

  • Unscored —

    An NTLM Hash Disclosure was discovered in ArchiMate Archi before 5.1.0. When parsing the XMLNS value of an ArchiMate pr…

  • Unscored —
    CVE-2023-37625 Public exploit

    A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or…

  • Unscored —

    Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an atta…

  • Unscored —

    Cacti before 1.2.6 allows IDOR (Insecure Direct Object Reference) for accessing any graph via a modified local_graph_id…

  • Unscored —

    EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow.

  • Unscored —
    CVE-2022-47636 Public exploit

    A DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user ope…