Skip to content
OpenAdvisories

Archive

9 March 2023

Vulnerabilities first published on this day (UTC), newest first.

59 results · Feed

  • Critical 9.8

    Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing…

  • High 7.8

    emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto:…

  • Unscored —

    A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers …

  • Unscored —

    A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers…

  • Unscored —

    Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin…

  • Critical 9.8

    Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton…

  • Unscored —

    Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parame…

  • Critical 9.1

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller…

  • High 7.5

    onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/downlo…

  • High 8.6

    Cisco IOS XR Software for ASR 9000 Series Routers Bidirectional Forwarding Detection Denial of Service Vulnerability

    A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers …

  • Medium 4.6

    Cisco IOS XR Software Bootloader Unauthenticated Information Disclosure Vulnerability

    A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to view sensitive files on the console using the GRUB bootloader command line. This vulnerability is du…

  • Medium 5.7

    An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions startin…

  • Medium 6.4

    An issue has been discovered in GitLab affecting all versions starting from 15.3 before 15.7.8, versions of 15.8 before…

  • Medium 5.0

    An issue has been discovered in GitLab DAST analyzer affecting all versions starting from 1.47 before 3.0.51, which sen…

  • Medium 5.0

    An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting f…

  • High 7.7

    Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers t…

  • Medium 5.4

    An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting f…

  • Medium 4.3

    An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8, 15.8 prior to 15.8.4 and 15…

  • Unscored —

    An issue discovered in Yuneec Mantis Q and PX4-Autopilot v 1.11.3 and below allow attacker to gain access to sensitive …