Skip to content
OpenAdvisories

Archive

29 January 2025

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 2.1

    Unsanitized Filenames in Flutter package image_picker_android Allow File Overwrites

    The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provi…

  • Low 2.1

    Unsanitized Filenames in Flutter package file_selector_android Allow File Overwrites

    The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that pr…

  • Low 2.4

    SourceCodester Online Courseware Edit Teacher saveeditt.php cross site scripting

    A vulnerability classified as problematic has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file /pcci/admin/saveeditt.php of the component Edit Teacher. The manipulation of the argument fname leads to cross site s…

  • Low 3.3

    MicroWorld eScan Antivirus Quarantine Microworld default permission

    A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the file /var/Microworld/ of the component Quarantine Handler. The manipulation leads to incorrect default…

  • Low 3.5

    ESAFENET CDG todolistjump.jsp cross site scripting

    A vulnerability was found in ESAFENET CDG V5. It has been classified as problematic. This affects an unknown part of the file /todolistjump.jsp. The manipulation of the argument flowId leads to cross site scripting. It is possible to initiate the attack remot…

  • Low 3.5

    ESAFENET CDG todoDetail.jsp cross site scripting

    A vulnerability was found in ESAFENET CDG V5 and classified as problematic. Affected by this issue is some unknown functionality of the file /todoDetail.jsp. The manipulation of the argument curpage leads to cross site scripting. The attack may be launched re…