Skip to content
OpenAdvisories

Archive

22 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /22 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-51649

    Nautobot missing object-level permissions enforcement when running Job Buttons

    Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL database. When submitting a Job to run via a Job Button, only the model-level `extras.run_job` permiss…

    nautobot nautobot nautobot PyPI
  • Low 3.5
    CVE-2023-7076

    slawkens MyAAC bugtracker.php cross site scripting

    A vulnerability was found in slawkens MyAAC up to 0.8.13. It has been declared as problematic. This vulnerability affects unknown code of the file system/pages/bugtracker.php. The manipulation of the argument bug[2]['subject']/bug[2]['text']/report['subject']…

    slawkens MyAAC
  • Low 3.5
    CVE-2023-7075

    code-projects Point of Sales and Inventory Management System checkout.php cross site scripting

    A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /main/checkout.php. The manipulation of the argument pt leads to cros…

    code-projects Point of Sales and Inventory Management System
  • Low 3.5
    CVE-2023-7059

    SourceCodester School Visitor Log e-Book log-book.php cross site scripting

    A vulnerability was found in SourceCodester School Visitor Log e-Book 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file log-book.php. The manipulation of the argument Full Name leads to cross site scriptin…

    SourceCodester School Visitor Log e-Book
  • Low 3.5
    CVE-2023-7057

    code-projects Faculty Management System yearlevel.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Secti…

    code-projects Faculty Management System
  • Low 2.4
    CVE-2023-7056

    code-projects Faculty Management System subjects.php cross site scripting

    A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to c…

    code-projects Faculty Management System
  • Low 3.1
    CVE-2023-7053

    PHPGurukul Online Notes Sharing System signup.php weak password

    A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiat…

    PHPGurukul Online Notes Sharing System