Skip to content
OpenAdvisories

Archive

22 October 2023

Vulnerabilities first published on this day (UTC), newest first.

← September 2023 2023 / October /22 November 2023 →
  1. 18
  2. 281
  3. 3138
  4. 4107
  5. 562
  6. 672
  7. 72
  8. 824
  9. 985
  10. 10256
  11. 11111
  12. 1288
  13. 1364
  14. 1430
  15. 1511
  16. 16168
  17. 17163
  18. 1874
  19. 19105
  20. 20125
  21. 2115
  22. 2226
  23. 2353
  24. 24122
  25. 25213
  26. 2690
  27. 2797
  28. 2813
  29. 2918
  30. 30171
  31. 31121
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-5700

    Netentsec NS-ASG Application Security Gateway uploadiscgwrouteconf.php sql injection

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to s…

    Netentsec NS-ASG Application Security Gateway
  • Medium 6.3
    CVE-2023-5693

    CodeAstro Internet Banking System pages_reset_pwd.php sql injection

    A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pages_reset_pwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiat…

    CodeAstro Internet Banking System
  • Medium 5.4
    CVE-2023-46095

    WordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Chetan Gole Smooth Scroll Links [SSL] plugin <= 1.1.0 versions.

    Chetan Gole Smooth Scroll Links [SSL]
  • Medium 4.3
    CVE-2023-46089

    WordPress Userback Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Lee Le @ Userback Userback plugin <= 1.0.13 versions.

    Lee Le @ Userback Userback
  • Medium 4.3
    CVE-2023-46085

    WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.

    Wpmet Wp Ultimate Review
  • Medium 5.7
    CVE-2023-38735

    IBM Cognos Dashboards improper authentication

    IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 262482.

    IBM Cognos Dashboards on Cloud Pak for Data
  • Medium 5.9
    CVE-2023-38276

    IBM Cognos Dashboards information disclosure

    IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system. IBM X-Force ID: 260736.

    IBM Cognos Dashboards on Cloud Pak for Data
  • Medium 5.9
    CVE-2023-38275

    IBM Cognos Dashboards information disclosure

    IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system. IBM X-Force ID: 260730.

    IBM Cognos Dashboards on Cloud Pak for Data
  • Medium 6.5
    CVE-2021-46897

    Wagtail CRX CodeRed Extensions vulnerable to Path Traversal

    views.py in Wagtail CRX CodeRed Extensions (formerly CodeRed CMS or coderedcms) before 0.22.3 allows upward protected/..%2f..%2f path traversal when serving protected media.

    coderedcms PyPI
  • Medium 6.1
    CVE-2021-46898

    Django Grappelli Open Redirect vulnerability

    views/switch.py in django-grappelli (aka Django Grappelli) before 2.15.2 attempts to prevent external redirection with startswith("/") but this does not consider a protocol-relative URL (e.g., //example.com) attack.

    django-grappelli PyPI