Skip to content
OpenAdvisories

Archive

26 February 2023

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Medium 5.3

    TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization

    A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in the library WinRing0x64.sys. The manipulation leads to improper initialization. Local access is requi…

  • Medium 5.3

    TechPowerUp RealTemp WinRing0x64.sys initialization

    A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The manipulation leads to improper initialization. An attack has to be approached locally. The exploit ha…

  • Medium 6.3

    MuYuCMS getFile.html server-side request forgery

    A vulnerability classified as critical has been found in MuYuCMS 2.2. This affects an unknown part of the file /admin.php/update/getFile.html. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack rem…

  • Medium 4.3

    MuYuCMS index.php path traversal

    A vulnerability was found in MuYuCMS 2.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /editor/index.php. The manipulation of the argument file_path leads to relative path traversal. The attack ca…

  • Medium 4.3

    MuYuCMS index.php path traversal

    A vulnerability was found in MuYuCMS 2.2. It has been classified as problematic. Affected is an unknown function of the file /editor/index.php. The manipulation of the argument dir_path leads to relative path traversal. It is possible to launch the attack rem…

  • Medium 6.3

    SourceCodester Online Graduate Tracer System add_acc.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown functionality of the file tracking/admin/add_acc.php. The manipulation of the argument id leads to sq…

  • Medium 6.3

    SourceCodester Online Reviewer Management System questions-view.php sql injection

    A vulnerability classified as critical has been found in SourceCodester Online Reviewer Management System 1.0. Affected is an unknown function of the file /reviewer_0/admins/assessments/pretest/questions-view.php. The manipulation of the argument id leads to …

  • Medium 4.3

    SourceCodester Dental Clinic Appointment Reservation System POST Parameter signup.php cross site scripting

    A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /APR/signup.php of the component POST Parameter Handler. The manipulation of…

  • Medium 6.1

    frp_form_answers allows Cross-site Scripting

    The frp_form_answers (aka Forms Export) extension before 3.1.2, and 4.x before 4.0.2, for TYPO3 allows XSS via saved emails.