Archive
5 November 2023
Vulnerabilities first published on this day (UTC), newest first.
7 results · Feed
-
Medium 5.5
Vaerys-Dawn DiscordSailv2 Command Mention access control
A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upg…
-
Low 3.5
Magnesium-PHP Base.php formatEmailString injection
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name l…
-
Unscored —
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in the Textile formatter.
-
Unscored —
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other p…
-
Unscored —
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS in a Markdown formatter.
-
Unscored —
Redmine before 4.2.11 and 5.0.x before 5.0.6 allows XSS via thumbnails.
-
Medium 6.1
Roundcube 1.5.x before 1.5.6 and 1.6.x before 1.6.5 allows XSS via a Content-Type or Content-Disposition header (used f…