Skip to content
OpenAdvisories

Archive

14 February 2024

Vulnerabilities first published on this day (UTC), newest first.

← January 2024 2024 / February /14 March 2024 →
  1. 198
  2. 2153
  3. 331
  4. 414
  5. 5157
  6. 6156
  7. 773
  8. 888
  9. 987
  10. 1030
  11. 1121
  12. 1291
  13. 13182
  14. 14170
  15. 15103
  16. 1652
  17. 1766
  18. 1829
  19. 1940
  20. 20203
  21. 21145
  22. 22105
  23. 2379
  24. 2420
  25. 2520
  26. 2676
  27. 27167
  28. 28226
  29. 29144
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-6441

    SQLi in UNI-PA's University Information System

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information Syst…

    UNI-PA University Marketing & Computer Internet Trade University Information System
  • Critical 9.8
    CVE-2024-23789

    Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent un…

    Sharp Energy Management Controller with Cloud Services
  • Critical 9.1
    CVE-2024-23788

    Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1…

    Sharp Energy Management Controller with Cloud Services
  • Critical 9.3
    CVE-2024-23786

    Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 an…

    Sharp Energy Management Controller with Cloud Services
  • Critical 9.6
    CVE-2024-24691

    Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input Validation

    Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

    Zoom Video Communications Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows Windows
  • Critical 9.8
    CVE-2024-24300

    4ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control. The device uses the same set of credentials, regardl…

  • Critical 9.8
    CVE-2024-25216

    Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /apr…

  • Critical 9.8
    CVE-2024-25211

    Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endp…

  • Critical 9.8
    CVE-2024-25220

    Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/…

  • Critical 9.8
    CVE-2024-25210

    Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpo…

  • Critical 9.8
    CVE-2024-25223

    Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /admin…

  • Critical 9.8
    CVE-2024-25222

    Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManag…

  • Critical 9.8
    CVE-2024-25214

    An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload in…

  • Critical 9.8
    CVE-2024-25215

    Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aproce…

  • Critical 9.8
    CVE-2024-25209

    Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident para…