Skip to content
OpenAdvisories

Archive

10 December 2023

Vulnerabilities first published on this day (UTC), newest first.

← November 2023 2023 / December /10 January 2024 →
  1. 158
  2. 210
  3. 39
  4. 4243
  5. 5131
  6. 656
  7. 7140
  8. 883
  9. 924
  10. 1024
  11. 1140
  12. 12192
  13. 13155
  14. 14157
  15. 15290
  16. 1619
  17. 1727
  18. 18106
  19. 19119
  20. 20116
  21. 21126
  22. 2280
  23. 2312
  24. 2411
  25. 2566
  26. 2669
  27. 2730
  28. 2874
  29. 29160
  30. 3036
  31. 3134
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2023-5869

    Postgresql: buffer overrun from integer overflow in array modification

    A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user c…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.3
    CVE-2023-6655 Scanner template

    Hongjing e-HR Login Interface loadhistroyorgtree sql injection

    A vulnerability, which was classified as critical, has been found in Hongjing e-HR 2020. Affected by this issue is some unknown functionality of the file /w_selfservice/oauthservlet/%2e./.%2e/general/inform/org/loadhistroyorgtree of the component Login Interf…

    Hongjing e-HR
  • High 7.3
    CVE-2023-6652

    code-projects Matrimonial Site register.php register sql injection

    A vulnerability was found in code-projects Matrimonial Site 1.0. It has been declared as critical. Affected by this vulnerability is the function register of the file /register.php. The manipulation leads to sql injection. The attack can be launched remotely.…

    code-projects Matrimonial Site
  • High 7.3
    CVE-2023-6651

    code-projects Matrimonial Site sql injection

    A vulnerability was found in code-projects Matrimonial Site 1.0. It has been classified as critical. Affected is an unknown function of the file /auth/auth.php?user=1. The manipulation of the argument username leads to sql injection. It is possible to launch …

    code-projects Matrimonial Site
  • High 7.3
    CVE-2023-6648

    PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection

    A vulnerability, which was classified as critical, was found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file password-recovery.php. The manipulation of the argument username/contactno leads to sql injection. I…

    PHPGurukul Nipah Virus Testing Management System
  • High 7.3
    CVE-2023-6647

    AMTT HiBOS sql injection

    A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unknown functionality. The manipulation of the argument Type leads to sql injection. The attack may be launched remotely. The exploit has been …

    AMTT HiBOS
  • High 7.5
    CVE-2023-50449

    Directory Traversal in JFinalCMS

    JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.

    com.jfinal:jfinal Maven