Skip to content
OpenAdvisories

Archive

30 December 2023

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • High 7.7

    Lockscreen bypass in eWeLink App

    Improper privilege management vulnerability in CoolKit Technology eWeLink on Android and iOS allows application lockscreen bypass.This issue affects eWeLink before 5.2.0.

  • High 8.8

    Apache DolphinScheduler: Arbitrary js execute as root for authenticated users

    Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9. Users are recommended to upgrade to ver…

  • High 7.3
    CVE-2023-7172 Public exploit

    PHPGurukul Hospital Management System Admin Dashboard sql injection

    A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the component Admin Dashboard. The manipulation leads to sql injection. The attack may be l…

  • High 7.5

    ehttp 1.0.6 before 17405b9 has an epoll_socket.cpp read_func use-after-free. An attacker can make many connections over…

  • High 7.8

    Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE b…