Skip to content
OpenAdvisories

Archive

9 January 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2015-10034 Public exploit

    j-nowak workout-organizer sql injection

    A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to…

  • Low 3.5
    CVE-2017-20165 Public exploit

    debug-js debug node.js useColors redos

    A vulnerability classified as problematic has been found in debug-js debug up to 3.0.x. This affects the function useColors of the file src/node.js. The manipulation of the argument str leads to inefficient regular expression complexity. Upgrading to version …

  • High 7.2
    CVE-2022-43973 Public exploit

    Arbitrary code execution in Linksys WRT54GL

    An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticate…