Skip to content
OpenAdvisories

Archive

6 March 2024

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 8.0
    CVE-2024-28157 Public exploit

    Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting

    Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.

  • High 7.3
    CVE-2024-20338 Public exploit

    A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, …

  • High 7.5
    CVE-2023-49980 Public exploit

    A directory listing vulnerability in Best Student Result Management System v1.0 allows attackers to list directories an…

  • High 7.5
    CVE-2023-49979 Public exploit

    A directory listing vulnerability in Customer Support System v1 allows attackers to list directories and sensitive file…

  • High 8.8
    CVE-2023-49982 Public exploit

    Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers t…

  • High 7.5
    CVE-2023-49981 Public exploit

    A directory listing vulnerability in School Fees Management System v1.0 allows attackers to list directories and sensit…

  • High 7.2
    CVE-2023-49978 Public exploit

    Incorrect access control in Customer Support System v1 allows non-administrator users to access administrative pages an…