Skip to content
OpenAdvisories

Archive

9 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /9 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-6677

    SQLi in Oduyo Online Collection Software

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection. This issue affects Online Collection: before v.1.0.2.

    Oduyo Financial Technology Online Collection
  • Critical 9.6
    CVE-2024-21762 Exploited · Ransomware Public exploit EPSS 85%

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.2, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0…

    Fortinet FortiOS FortiProxy Network devices
    KEV Feb 9, 2024
  • Critical 9.8
    CVE-2023-46687

    Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection

    In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer.

    Emerson Rosemount GC1500XA Rosemount GC700XA Rosemount GC370XA
  • Critical 9.8
    CVE-2023-50026

    SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop ver…

  • Critical 9.8
    CVE-2023-46350

    SQL injection vulnerability in InnovaDeluxe "Manufacturer or supplier alphabetical search" (idxrmanufacturer) module fo…

  • Critical 9.8
    CVE-2024-24308

    SQL Injection vulnerability in Boostmyshop (boostmyshopagent) module for Prestashop versions 1.1.9 and before, allows r…

  • Critical 9.8
    CVE-2024-25307

    Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at "/Cinema-Reservation/bo…

  • Critical 9.8
    CVE-2024-25316

    Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'eid' parameter in Hotel/admin/usersettingdel.php…

  • Critical 9.8
    CVE-2024-25314

    Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.

  • Critical 9.8
    CVE-2024-25315

    Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=…

  • Critical 9.8
    CVE-2024-25674

    An issue was discovered in MISP before 2.4.184. Organisation logo upload is insecure because of a lack of checks for th…

  • Critical 9.8
    CVE-2024-25675

    An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation proces…

  • Critical 9.8
    CVE-2024-25302

    Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.