Skip to content
OpenAdvisories

Archive

13 August 2024

Vulnerabilities first published on this day (UTC), newest first.

85 results · Clear filters · Feed

  • Medium 4.3

    OcoMon URL require_access_recovery.php cross site scripting

    A vulnerability, which was classified as problematic, has been found in OcoMon 4.0RC1/4.0/5.0RC1. This issue affects some unknown processing of the file /includes/common/require_access_recovery.php of the component URL Handler. The manipulation leads to cross…

  • Medium 6.8

    A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit,…

  • Medium 6.1

    A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web scrip…

  • Medium 4.8

    symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.

  • Medium 6.8

    In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerabilit…