Skip to content
OpenAdvisories

Archive

13 January 2023

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Critical 9.8

    A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verificati…

  • Critical 9.8

    Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…

  • Critical 9.8

    The RPC interface in datax-web v1.0.0 and v2.0.0 to v2.1.2 contains no permission checks by default which allows attack…

  • Critical 9.8
    CVE-2022-46502 EPSS 14%

    Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username paramete…

  • Critical 9.8

    Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…

  • Critical 9.8

    Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter …

  • Critical 9.8
    CVE-2022-45299 Public exploit

    webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL

    An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.