Skip to content
OpenAdvisories

Archive

28 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /28 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 10.0
    CVE-2023-43654 Public exploit Scanner template EPSS 42%

    TorchServe Server-Side Request Forgery

    TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken ad…

    pytorch serve torchserve PyPI
  • Critical 9.8
    CVE-2023-44166

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.

    Online Movie Ticket Booking System Online Movie Ticket Booking System
  • Critical 9.8
    CVE-2023-44164

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.

    Online Movie Ticket Booking System Online Movie Ticket Booking System
  • Critical 9.8
    CVE-2023-44163

    Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

    The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.

    Online Movie Ticket Booking System Online Movie Ticket Booking System
  • Critical 9.8
    CVE-2023-43739

    Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)

    The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database.

    Online Book Store Project Online Book Store Project
  • Critical 9.8
    CVE-2023-43013

    Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi)

    Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.

    Asset Management System Asset Management System
  • Critical 9.1
    CVE-2023-5185

    Gym Management System Project v1.0 - Insecure File Upload

    Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.

    Gym Management System Project Gym Management System Project
  • Critical 9.8
    CVE-2023-5053

    SQL Injection in hospital-management-system-in-php 378c157 in index.php

    Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.

    hospital-management-system hospital-management-system
  • Critical 9.8
    CVE-2023-5004

    Hospital-management-system-in-php 378c157 - Blind SQL Injection

    Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.

    hospital-management-system hospital-management-system