Skip to content
OpenAdvisories

Archive

20 August 2023

Vulnerabilities first published on this day (UTC), newest first.

← July 2023 2023 / August /20 September 2023 →
  1. 184
  2. 256
  3. 3150
  4. 457
  5. 526
  6. 619
  7. 7115
  8. 8254
  9. 9102
  10. 10133
  11. 11155
  12. 123
  13. 1329
  14. 14136
  15. 1595
  16. 16104
  17. 1779
  18. 1859
  19. 197
  20. 2014
  21. 2163
  22. 22191
  23. 2361
  24. 2465
  25. 2586
  26. 266
  27. 2713
  28. 2877
  29. 2952
  30. 30119
  31. 31104
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Medium 6.3
    CVE-2023-4441

    SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection

    A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /patient/appointment.php. The manipulation of the argument sheduledate l…

    SourceCodester Free Hospital Management System for Small Practices
  • Medium 6.3
    CVE-2023-4440

    SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection

    A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0. It has been classified as critical. This affects an unknown part of the file appointment.php. The manipulation of the argument sheduledate leads to sql inject…

    SourceCodester Free Hospital Management System for Small Practices
  • Medium 4.3
    CVE-2023-4439

    SourceCodester Card Holder Management System Minus Value unknown vulnerability

    A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Minus Value Handler. The manipulation leads to improper validation of specified …

    SourceCodester Card Holder Management System
  • Medium 6.3
    CVE-2023-4438

    SourceCodester Inventory Management System search_sales_report.php sql injection

    A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file app/ajax/search_sales_report.php. The manipulation of the argument customer lea…

    SourceCodester Inventory Management System
  • Medium 6.3
    CVE-2023-4437

    SourceCodester Inventory Management System search_sell_paymen_report.php sql injection

    A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file app/ajax/search_sell_paymen_report.php. The manipulation of the argument customer leads to sql injectio…

    SourceCodester Inventory Management System
  • Medium 6.3
    CVE-2023-4436

    SourceCodester Inventory Management System edit_update.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester Inventory Management System 1.0. This issue affects some unknown processing of the file app/action/edit_update.php. The manipulation of the argument user_id leads to sql injec…

    SourceCodester Inventory Management System
  • Medium 6.1
    CVE-2023-4451 Scanner template

    Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit

    Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.

    cockpit-hq cockpit-hq/cockpit cockpit-hq/cockpit Packagist
  • High 7.7
    CVE-2023-4435

    Improper Input Validation in hamza417/inure

    Improper Input Validation in GitHub repository hamza417/inure prior to build88.

    hamza417 hamza417/inure
  • Medium 5.1
    CVE-2023-4434

    Missing Authorization in hamza417/inure

    Missing Authorization in GitHub repository hamza417/inure prior to build88.

    hamza417 hamza417/inure
  • Unscored —
    CVE-2023-36674

    An issue was discovered in MediaWiki before 1.35.11, 1.36.x through 1.38.x before 1.38.7, 1.39.x before 1.39.4, and 1.4…

    mediawiki mediawiki Debian Ubuntu
  • Unscored —
    CVE-2023-40711

    Veilid before 0.1.9 does not check the size of uncompressed data during decompression upon an envelope receipt, which a…

  • Unscored —
    CVE-2023-37369

    In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, there can be an application crash in QXml…

    qtbase-opensource-src qtbase-opensource-src qt6-base qt6-base Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2023-37250 Public exploit

    Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was in…

  • Unscored —
    CVE-2022-24989 Public exploit EPSS 32%

    TerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and disks…