Skip to content
OpenAdvisories

Archive

11 November 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Feed

  • Medium 4.6

    IBM QRadar SIEM cross-site scripting

    IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM …

  • Medium 4.3

    Byzoro Smart S85F Management Platform login.php password recovery

    A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the file /login.php. The manipulation of the argument txt_newpwd leads to weak password recovery. The exp…

  • Unscored —

    Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execu…

  • High 7.5

    Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigge…

  • High 7.5

    Headscale writes bearer tokens to info-level logs

    Headscale through 0.22.3 writes bearer tokens to info-level logs.