Skip to content
OpenAdvisories

Archive

23 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /23 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-3962

    Kiali: error message spoofing in kiali ui

    A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoint being accessed cannot be found. This issue allows an attacker to perform arbitrary text injection when an error respo…

    Red Hat OpenShift Service Mesh 2.1 Red Hat OpenShift Service Mesh 2.3 for RHEL 8 github.com/kiali/kiali Go
  • Medium 4.3
    CVE-2023-5134

    Easy Registration Forms <= 2.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode

    The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erforms_user_meta' shortcode in versions up to, and including, 2.1.1 due to insufficient controls on the information retrievable via the shortcode. This makes it possib…

    Easy Registration Forms Easy Registration Forms
  • Medium 6.4
    CVE-2023-5125

    Contact Form by FormGet <= 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Contact Form by FormGet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formget' shortcode in versions up to, and including, 5.5.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it…

    pankajagarwal Contact Form by FormGet – Best Form Builder Plugin for WordPress Web / CMS