Skip to content
OpenAdvisories

Archive

12 January 2024

Vulnerabilities first published on this day (UTC), newest first.

← December 2023 2024 / January /12 February 2024 →
  1. 115
  2. 2107
  3. 395
  4. 459
  5. 574
  6. 68
  7. 735
  8. 8197
  9. 9159
  10. 10178
  11. 11139
  12. 12129
  13. 1352
  14. 144
  15. 1566
  16. 16228
  17. 1785
  18. 1890
  19. 19108
  20. 2015
  21. 2114
  22. 2258
  23. 23147
  24. 2476
  25. 2574
  26. 26111
  27. 2717
  28. 2810
  29. 2994
  30. 3076
  31. 3192
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2024-0230 Public exploit

    A session management issue was addressed with improved checks. This issue is fixed in Magic Keyboard Firmware Update 2.…

    Apple Magic Keyboard Firmware
  • Low 3.5
    CVE-2024-0472

    code-projects Dormitory Management System modifyuser.php information disclosure

    A vulnerability was found in code-projects Dormitory Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file modifyuser.php. The manipulation of the argument mname leads to information disclosure. The ex…

    code-projects Dormitory Management System
  • Low 3.1
    CVE-2023-49099

    Discourse secure uploads accessible to guests even when login is required

    Discourse is a platform for community discussion. Under very specific circumstances, secure upload URLs associated with posts can be accessed by guest users even when login is required. This vulnerability has been patched in 3.2.0.beta4 and 3.1.4.

    Discourse Discourse
  • Low 3.5
    CVE-2023-49098

    Reaction data for user notifications exposed in Discourse-reactions

    Discourse-reactions is a plugin that allows user to add their reactions to the post. Data about a user's reaction notifications could be exposed. This vulnerability was patched in commit 2c26939.

    Discourse discourse-reactions
  • Low 3.5
    CVE-2024-0467

    code-projects Employee Profile Management System edit_position_query.php cross site scripting

    A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file edit_position_query.php. The manipulation of the argument pos_name leads to cross site scripti…

    code-projects Employee Profile Management System
  • Low 3.5
    CVE-2024-0465

    code-projects Employee Profile Management System download.php path traversal

    A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The manipulation of the argument download_file leads to path traversal: '../filedir'…

    code-projects Employee Profile Management System
  • Low 3.5
    CVE-2023-2030

    Improper Verification of Cryptographic Signature in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.5
    CVE-2022-4960

    cloudfavorites favorites-web Nickname cross site scripting

    A vulnerability, which was classified as problematic, has been found in cloudfavorites favorites-web 1.3.0. Affected by this issue is some unknown functionality of the component Nickname Handler. The manipulation leads to cross site scripting. The attack may …

    cloudfavorites favorites-web