Skip to content
OpenAdvisories

Archive

8 September 2023

Vulnerabilities first published on this day (UTC), newest first.

54 results · Feed

  • Unscored —

    Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabili…

  • Unscored —

    Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page v…

  • High 7.5

    Jeecg boot arbitrary file read vulnerability

    Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.

  • High 7.5

    hutool Buffer Overflow vulnerability

    hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

  • Critical 9.8

    hutool Buffer Overflow vulnerability

    hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.

  • Critical 9.8

    Jeecg boot SQL Injection vulnerability

    Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.

  • Critical 9.8

    hutool Buffer Overflow vulnerability

    hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.

  • Medium 5.9

    An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, A…

  • Unscored —
    CVE-2023-37759 Public exploit

    Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthentica…

  • Medium 5.3

    An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, E…

  • Low 2.0

    An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100,…

  • Unscored —

    An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input us…

  • Unscored —

    An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authenticati…

  • Unscored —
    CVE-2021-45811 Scanner template

    A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticat…