Skip to content
OpenAdvisories

Archive

17 March 2023

Vulnerabilities first published on this day (UTC), newest first.

57 results · Feed

  • Low 3.3

    MP4v2 mp4trackdump.cpp DumpTrack denial of service

    A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulation leads to denial of service. The attack needs to be approached locally. The exploit has been disclo…

  • Medium 5.3

    GPAC av_parsers.c gf_av1_reset_state double free

    A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to lau…

  • Medium 5.3

    GPAC mpegts.c gf_m2ts_process_sdt heap-based overflow

    A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is…

  • Low 3.5

    SourceCodester Medicine Tracker System cross site scripting

    A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown functionality of the file app/?page=medicines/manage_medicine. The manipulation of the argument name/des…

  • Medium 5.5

    Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 denial of service

    A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in the library wsdk-driver.sys of the component IoControlCode Handler. The manipulation leads to denial …

  • Low 3.3

    Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service

    A vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is the function 0x80112053 in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack needs to b…

  • High 7.5

    Filseclab Twister Antivirus IoControlCode fildds.sys 0x8011206B denial of service

    A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. The attack may…

  • Medium 6.5

    Filseclab Twister Antivirus IoControlCode fildds.sys 0x80112053 denial of service

    A vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affects the function 0x80112053 in the library fildds.sys of the component IoControlCode Handler. The manipulation leads to denial of service. …

  • Medium 4.7

    Meizhou Qingyunke QYKCMS Update api.php unrestricted upload

    A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted …

  • Medium 6.3

    SourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection

    A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/courses/view_course.php of the component GET Parameter Hand…

  • Medium 6.3

    SourceCodester Automatic Question Paper Generator System GET Parameter manage_user.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manage_user.php of the component GET Parameter Handler. The manipulation of th…

  • Medium 6.3

    SourceCodester Medicine Tracker System GET Parameter view_details.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of the file medicines/view_details.php of the component GET Parameter Handler. The manipulation of the …

  • High 7.4

    Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions be…

  • Unscored —

    ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. Th…

  • Medium 6.3

    Authorization Bypass Through User-Controlled Key in nilsteampassnet/teampass

    Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

  • High 7.5

    A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a cra…

  • Unscored —
    CVE-2023-27253 Public exploit EPSS 90%

    A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated atta…