Skip to content
OpenAdvisories

Archive

24 May 2024

Vulnerabilities first published on this day (UTC), newest first.

← April 2024 2024 / May /24 June 2024 →
  1. 1253
  2. 2243
  3. 3847
  4. 417
  5. 537
  6. 6151
  7. 7186
  8. 8114
  9. 9227
  10. 10104
  11. 1128
  12. 1218
  13. 13138
  14. 14285
  15. 15242
  16. 16227
  17. 17335
  18. 1826
  19. 19101
  20. 20137
  21. 21445
  22. 22178
  23. 23142
  24. 24129
  25. 2512
  26. 2647
  27. 2782
  28. 28143
  29. 2967
  30. 30235
  31. 3176
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.7
    CVE-2024-35232

    github.com/huandu/facebook may expose access_token in error message

    github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request and marketing API. access_token can be exposed in error message on fail in HTTP request. This issue has been patched in version 2.7.2.

    huandu facebook github.com/huandu/facebook github.com/huandu/facebook/v2 Go
  • Low 2.4
    CVE-2024-5310

    JFinalCMS content cross site scripting

    A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely…

  • Low 2.4
    CVE-2023-7259

    zzdevelop lenosp Adduser Page cross site scripting

    ** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown part of the component Adduser Page. The manipulation of the argument username with the input <script>alert(1)</script> …

    zzdevelop lenosp
  • Low 2.4
    CVE-2023-1111

    FastCMS New Article Tab cross site scripting

    A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be laun…

  • Low 3.5
    CVE-2023-1001

    xuliangzhan vxe-table vxe-textarea textarea.js export cross site scripting

    A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue affects the function export of the file packages/textarea/src/textarea.js of the component vxe-textarea. The manipulation of the argument inp…

    xuliangzhan vxe-table vxe-table npm