2023-01-15

2023-01-16

2023-01-17

All (3) Critical (1) High (2) Medium (3)

CVE-2023-0316 MEDIUM POC PATCH This Month

Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Path Traversal Froxlor

NVD GitHub

CVSS 3.1

5.5

EPSS

0.7%

CVE-2023-0323 MEDIUM POC PATCH This Month

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Pimcore

NVD GitHub

CVSS 3.1

5.4

EPSS

0.5%

CVE-2023-0327 MEDIUM PATCH This Month

A vulnerability was found in saemorris TheRadSystem. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Theradsystem

NVD GitHub VulDB

CVSS 3.1

6.1

EPSS

0.5%