Skip to content
OpenAdvisories

Archive

15 October 2023

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 6.3

    SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection

    A vulnerability was found in SourceCodester Free Hospital Management System for Small Practices 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /vm/admin/doctors.php of the component Parameter Handler. The mani…

  • Medium 4.9

    IBM i privilege escalation

    IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584.

    IBM i
  • Medium 4.4

    NULL Pointer Dereference in gpac/gpac

    NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.

  • Medium 6.1

    Authorization Header forwarded on redirect

    urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts o…