Archive
27 February 2023
Vulnerabilities first published on this day (UTC), newest first.
145 results · Feed
-
Medium 6.3
SourceCodester Doctors Appointment System patient.php sql injection
A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edoc/doctor/patient.php. The manipulation of the argument search12 leads to s…
-
Medium 4.7
SourceCodester Music Gallery Site sql injection
A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch …
-
Medium 4.7
SourceCodester Music Gallery Site view_category.php sql injection
A vulnerability was found in SourceCodester Music Gallery Site 1.0 and classified as critical. This issue affects some unknown processing of the file view_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated re…
-
Medium 6.6
An unauthorized configuration download vulnerability in FortiWeb 6.3.6 through 6.3.21, 6.4.0 through 6.4.2 and 7.0.0 th…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious a…
-
Medium 5.2
Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
-
Unscored —
A flaw was found in RHDS 11 and RHDS 12. While browsing entries LDAP tries to decode the userPassword attribute instead…
-
High 7.1
External Control of File Name or Path in nilsteampassnet/teampass
External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22.
-
Unscored —
Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability.
-
Unscored —
Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.
-
Unscored —
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerabi…
-
High 8.8
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the use…
-
High 8.8
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the old…
-
Medium 5.4
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the nam…
-
High 8.8
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the nam…
-
High 8.8
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the sub…
-
High 7.2CVE-2023-24249 Public exploit
laravel-admin has Arbitrary File Upload vulnerability
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.
-
Unscored —
WangEditor v5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /dist/index.js.
-
High 8.8
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Des…
-
Medium 5.5
The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura 13.2,…
-
High 7.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPa…
-
High 7.8
The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2. …
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to exe…
-
High 7.5
A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 9.3, tvOS 16.3, …
-
High 7.5
A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 …
-
Unscored —
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2, watchOS 9.3, iOS 15.7.2 and iP…
-
High 7.8
A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, macOS …
-
Unscored —
The issue was addressed with improved memory handling This issue is fixed in macOS Ventura 13.2. An app may be able to …
-
Critical 9.8
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7.3, macOS…
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.3, macOS Ventura …
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.2. An app may be ab…
-
High 8.6CVE-2023-23531 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
Unscored —
An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12…
-
High 8.8
The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13.2…
-
Unscored —
Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda CP7<=V11.10.00.2211041403 and …
-
Unscored —
A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.3 and iPadOS 15.7.3, macOS …
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 1…
-
Unscored —
In crasm 1.8-3, invalid input validation, specific files passed to the command line application, can lead to a NULL poi…