Archive
2 January 2024
Vulnerabilities first published on this day (UTC), newest first.
107 results · Feed
-
Medium 4.4
In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Medium 4.4
In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local infor…
-
Critical 9.8
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote co…
-
Medium 6.7
In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati…
-
Low 3.7
HuiRan Host Reseller System HTTP POST Request password recovery
A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file /user/index/findpass?do=4 of the component HTTP POST Request Handler. The manipulation leads to weak password reco…
-
Medium 4.7
RRJ Nueva Ecija Engineer Online Portal Avatar dasboard_teacher.php unrestricted upload
A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboard_teacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload.…
-
Low 3.8
Gila CMS SQL Injection vulnerability
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the 'user_id' parameter after the login portal.
-
Low 3.8
Gila CMS SQL Injection
SQL Injection vulnerability discovered in Gila CMS 1.15.4 and earlier allows a remote attacker to execute arbitrary web scripts via the Area parameter under the Administration>Widget tab after the login portal.
-
Low 3.8
Gila CMS SQL Injection vulnerability
A SQL injection vulnerability was discovered in Gila CMS 1.15.4 and earlier which allows a remote attacker to execute arbitrary web scripts via the ID parameter after the login portal.
-
High 7.5
An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.
-
Medium 5.9
An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF…
-
High 7.5
An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unau…
-
High 7.5
An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote atta…
-
Medium 5.3
An issue in A-WORLD OIRASE BEER_waiting Line v.13.6.1 allows attackers to send crafted notifications via leakage of the…
-
Critical 9.8
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions …
-
High 7.5
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function …
-
Medium 5.5
Buffer Overflow vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expr…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_mmac_params functi…
-
High 7.5
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function…
-
High 7.5
An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the yasm_section_bcs_first fu…
-
High 7.5
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
-
Medium 5.5
Use After Free vulnerability in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the do_di…
-
High 7.5
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in th…
-
Medium 5.5
An issue in YASM 1.3.0.86.g9def allows a remote attacker to cause a denial of service via the expand_smacro function in…