Skip to content
OpenAdvisories

Archive

12 May 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.4

    Stored Cross-Site Scripting (XSS) via Profile Picture Upload in parisneo/lollms-webui

    A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload functionality. Attackers can exploit this vulnerability by uploading malicious HTML fi…

  • High 7.5

    Contemporary Control System BASrouter BACnet BASRT-B Application Protocol Data Unit denial of service

    A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vulnerability affects unknown code of the component Application Protocol Data Unit. The manipulation leads to denial of service. The attack ca…