Archive
9 March 2023
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Medium 6.3
UCMS System File Management Module fileedit.php unrestricted upload
A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component System File Management Module. The manipulation of the argument file leads to unrestricted upload. Th…
-
Low 3.5
SourceCodester File Tracker Manager System borrow1.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file normal/borrow1.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> …
-
Medium 6.3
SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this issue is some unknown functionality of the file deleteorder.php of the component GET Parameter Handler.…
-
Medium 6.3
SourceCodester COVID 19 Testing Management System POST Parameter patient-report.php sql injection
A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file patient-report.php of the component POST Parameter Handler. The manipulation of t…
-
High 7.8
CVE-2023-0621
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in reads past the end of allocated data structures. An at…
-
High 7.8
CVE-2023-0623
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An …
-
High 7.8
CVE-2023-0622
Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation of user-supplied data, which could result in writes past the end of allocated data structures. An …
-
High 8.1
Missing proper state, nonce and PKCE checks for OAuth authentication in next-auth
NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.1` have been found to be subject to an authentication vulnerability. A bad actor who can read traffic on the v…
-
Medium 6.2
Unchecked fieldpath index in Composition's patches can lead to arbitrary memory allocation in crossplane
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly privileged user able to create or update Compositions can specify an arbitrarily high index in a patc…
-
High —
Constellation allows Emergency shell access during initramfs boot phase
### Impact An active attacker could let the boot fail on purpose in the initramfs, dropping the serial console into an emergency shell. This gives attackers with access to the serial console full control over the VM. ### Patches The issue has been patched in …
-
Medium 5.9
fieldpath's Paved.SetValue allows growing arrays up to arbitrary sizes in crossplane-runtime
crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has been discovered in affected versions. Applications that use the `Paved` type's `SetValue` method wi…
-
High 7.1
Arbitrary File Read Vulnerability in metersphere
metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI operations is able to append a path to their submission query which will be read by the system and displayed t…
-
High 8.6
Improper access control to download file in metersphere
metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`, which allows any user to download any file without authentication. This issue may expose all files…
-
Medium 6.8
ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability
An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.
-
Critical 9.0
ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.
-
Medium 4.9
Consul Server Panic when Ingress and API Gateways Configured with Peering
Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to crash under certain circumstances. This vulnerability was fixed in Consul 1.14.5.
-
Low 3.5CVE-2023-26209 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and…
-
Low 3.5CVE-2023-26208 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.…
-
Low 3.5CVE-2022-29056 Public exploit
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiMail version 6.4.0…
-
High 7.3
SourceCodester File Tracker Manager System POST Parameter login.php sql injection
A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /file_manager/login.php of the component POST Parameter Handler. The manipulation of the argument user…
-
Medium 5.0
SourceCodester Online Graduate Tracer System admin_cs.php mysqli_query sql injection
A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the file admin_cs.php. The manipulation leads to sql injection. The attack may be initiated remotely. The…
-
Medium 6.3
SourceCodester Sales Tracker Management System Master.php delete_client sql injection
A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete_client of the file classes/Master.php. The manipulation of the argument id leads to sql injection. …
-
Medium 6.3
SourceCodester Sales Tracker Management System manage_client.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/clients/manage_client.php. The manipulation of the argument id leads to sql injection. It is pos…
-
Medium 6.3
SourceCodester Sales Tracker Management System view_client.php sql injection
A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown functionality of the file admin/clients/view_client.php. The manipulation of the argument id leads …
-
Critical 9.8
SQLi in Wolvox
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03.
-
High 7.3
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
-
High 7.3
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation.
-
Medium 5.3
An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting f…
-
High 8.7CVE-2023-0050 EPSS 92%
An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting f…
-
Medium 5.5
An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting f…
-
Medium 4.8
Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
-
Medium 4.3
An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting fr…
-
Low 2.7
An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 befo…
-
High 7.8
emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailt…
-
Unscored —
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin…
-
Unscored —
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate…
-
Unscored —
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /krux…
-
Unscored —
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton…
-
Unscored —
A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to…
-
Unscored —
A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to…