Skip to content
OpenAdvisories

Archive

9 July 2023

Vulnerabilities first published on this day (UTC), newest first.

← June 2023 2023 / July /9 August 2023 →
  1. 138
  2. 2 
  3. 341
  4. 459
  5. 580
  6. 6204
  7. 758
  8. 824
  9. 98
  10. 10128
  11. 11278
  12. 12239
  13. 13114
  14. 1460
  15. 1512
  16. 1618
  17. 17102
  18. 18149
  19. 1965
  20. 2066
  21. 2169
  22. 2217
  23. 2319
  24. 2457
  25. 2598
  26. 2673
  27. 2775
  28. 2891
  29. 291
  30. 3011
  31. 3164
All Critical High Medium Low Exploited only Public exploit

8 results · Feed

  • High 8.4
    CVE-2023-30431

    IBM Db2 buffer overflow

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: 252184.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 4.3
    CVE-2023-23487

    IBM Db2 audit logging

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • High 8.4
    CVE-2023-27558

    IBM Db2 privilege escalation

    IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executab…

    IBM Db2 for Windows Windows
  • Medium 5.3
    CVE-2023-29256

    IBM Db2 information disclosure

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: 252046.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Critical 9.8
    CVE-2023-2046

    SQLi in Yontem Vehicle TrackingSsystem

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8.

    Yontem Informatics Vehicle Tracking System
  • Medium 6.1
    CVE-2023-2853

    XSS in SoftMed's SelfPatron

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softmed SelfPatron allows Reflected XSS. This issue affects SelfPatron : before 2.0.

    Softmed SelfPatron
  • Critical 9.8
    CVE-2023-2852

    SQLi in SoftMed's SelfPatron

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0.

    Softmed SelfPatron
  • Critical 9.8
    CVE-2023-3045

    SQLi in Tise Technology's Parking Web Report

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1.

    Tise Technology Parking Web Report