Skip to content
OpenAdvisories

Archive

7 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /7 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.4
    CVE-2023-47145

    IBM Db2 for Windows privilege escalation

    IBM Db2 for Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a local user to escalate their privileges to the SYSTEM user using the MSI repair functionality. IBM X-Force ID: 270402.

    IBM Db2
  • High 7.3
    CVE-2023-7210

    OneNav API improper authentication

    A vulnerability was found in OneNav up to 0.9.33. It has been classified as critical. This affects an unknown part of the file /index.php?c=api of the component API. The manipulation of the argument X-Token leads to improper authentication. It is possible to …

  • High 7.5
    CVE-2023-7209

    Uniway Router Device Reset device_reset.cgi denial of service

    A vulnerability was found in Uniway Router up to 2.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boaform/device_reset.cgi of the component Device Reset Handler. The manipulation leads to denial of service.…

    Uniway Router
  • High 7.3
    CVE-2024-0268

    Kashipara Hospital Management System registration.php sql injection

    A vulnerability, which was classified as critical, has been found in Kashipara Hospital Management System up to 1.0. Affected by this issue is some unknown functionality of the file registration.php. The manipulation of the argument name/email/pass/gender/age…

    Kashipara Hospital Management System
  • High 8.0
    CVE-2023-7208

    Totolink X2000R_V2 boa formTmultiAP buffer overflow

    A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this v…

    Toto Link X2000R_V2
  • High 7.3
    CVE-2024-0267

    Kashipara Hospital Management System Parameter login.php sql injection

    A vulnerability classified as critical was found in Kashipara Hospital Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Parameter Handler. The manipulation of the argument email/pas…

    Kashipara Hospital Management System
  • High 7.3
    CVE-2024-0264 EPSS 18%

    SourceCodester Clinic Queuing System LoginRegistration.php authorization

    A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /LoginRegistration.php. The manipulation of the argument formToken leads to authorization bypass. The …

    SourceCodester Clinic Queuing System