Archive
8 September 2023
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Unscored —
Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabili…
-
Unscored —
Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page v…
-
High 7.5
Jeecg boot arbitrary file read vulnerability
Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection.
-
High 7.5
hutool Buffer Overflow vulnerability
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
-
Critical 9.8
hutool Buffer Overflow vulnerability
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
-
Critical 9.8
Jeecg boot SQL Injection vulnerability
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
-
Critical 9.8
hutool Buffer Overflow vulnerability
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
-
Medium 5.9
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, A…
-
Unscored —CVE-2023-37759 Public exploit
Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthentica…
-
Medium 5.3
An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, E…
-
Low 2.0
An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100,…
-
Unscored —
An issue was discovered in iscflashx64.sys 3.9.3.0 in Insyde H2OFFT 6.20.00. When handling IOCTL 0x22229a, the input us…
-
Unscored —
An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authenticati…
-
Unscored —CVE-2021-45811 Scanner template
A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticat…