Skip to content
OpenAdvisories

Archive

3 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /3 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-2151

    SourceCodester Online Mobile Management Store Product Price logic error

    A vulnerability classified as problematic was found in SourceCodester Online Mobile Management Store 1.0. Affected by this vulnerability is an unknown functionality of the component Product Price Handler. The manipulation of the argument quantity with the inp…

    SourceCodester Online Mobile Management Store
  • Medium 5.3
    CVE-2024-2150

    SourceCodester Insurance Management System file inclusion

    A vulnerability, which was classified as critical, has been found in SourceCodester Insurance Management System 1.0. This issue affects some unknown processing. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotel…

    SourceCodester Insurance Management System
  • Medium 4.7
    CVE-2024-2149

    CodeAstro Membership Management System settings.php sql injection

    A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.php. The manipulation of the argument currency leads to sql injection. The attack can be initiated rem…

    CodeAstro Membership Management System
  • Medium 6.3
    CVE-2024-2148

    SourceCodester Online Mobile Management Store Users.php unrestricted upload

    A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument img leads to unrestricted upload. It is possible to initi…

    SourceCodester Online Mobile Management Store
  • Medium 5.9
    CVE-2023-28512

    IBM Watson CP4D Data Stores improper input validation

    IBM Watson CP4D Data Stores 4.6.0, 4.6.1, and 4.6.2 could allow an attacker with specific knowledge about the system to manipulate data due to improper input validation. IBM X-Force ID: 250396.

    IBM Watson CP4D Data Stores
  • Medium 4.5
    CVE-2023-27291

    IBM Watson CP4D Data Stores information disclosure

    IBM Watson CP4D Data Stores 4.6.0, 4.6.1, 4.6.2, and 4.6.3 does not encrypt sensitive or critical information before storage or transmission which could allow an attacker to obtain sensitive information. IBM X-Force ID: 248740.

    IBM Watson CP4D Data Stores
  • Medium 4.4
    CVE-2022-43880

    IBM QRadar WinCollect Agent

    IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151.

    IBM QRadar WinCollect Agent
  • Medium 5.9
    CVE-2024-22355

    IBM QRadar Suite information dislosure

    IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force I…

    IBM Cloud Pak for Security QRadar Suite Products
  • Medium 5.9
    CVE-2023-47742

    IBM QRadar Suite information dislosure

    IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in som…

    IBM Cloud Pak for Security QRadar Suite Products
  • Medium 6.4
    CVE-2023-43054

    IBM Engineering Test Management cross-site scripting

    IBM Engineering Test Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu…

    IBM Engineering Test Management
  • Medium 6.2
    CVE-2023-47745

    IBM MQ Container information disclosure

    IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 stores or transmits user credentials in plain clear text which can be read by a local user using a trace command.…

    IBM MQ Operator
  • Medium 5.9
    CVE-2024-27255

    IBM MQ Container information disclosure

    IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2, and 2.3.0 through 2.3.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor…

    IBM MQ Operator
  • Medium 4.3
    CVE-2024-2134

    Bdtask Hospita AutoManager Investigation Report cross-site request forgery

    A vulnerability has been found in Bdtask Hospita AutoManager up to 20240223 and classified as problematic. This vulnerability affects unknown code of the file /investigation/delete/ of the component Investigation Report Handler. The manipulation leads to cros…

    Bdtask Hospita AutoManager
  • Medium 6.1
    CVE-2024-25551

    Cross Site Scripting (XSS) vulnerability in sourcecodester Simple Student Attendance System v1.0 allows attackers to ex…