Skip to content
OpenAdvisories

Archive

4 March 2024

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-27198 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

    KEV Mar 7, 2024
  • High 7.8
    CVE-2023-6241 Public exploit

    Mali GPU Kernel Driver allows improper GPU memory processing operations

    Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition…

  • High 7.5
    CVE-2023-33105 Public exploit

    Configuration Issue in WLAN Host and Firmware

    Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.

  • Critical 9.8
    CVE-2024-20017 Public exploit EPSS 47%

    In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote co…

  • Medium 4.3
    CVE-2023-49969 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_su…

  • High 8.8
    CVE-2023-49546 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customer…

  • Critical 9.8
    CVE-2023-49547 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /custo…

  • High 7.3
    CVE-2023-49968 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customer_su…

  • Critical 9.8
    CVE-2023-49970 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the subject parameter at /custom…

  • High 8.8
    CVE-2023-49548 Public exploit

    Customer Support System v1 was discovered to contain a SQL injection vulnerability via the lastname parameter at /custo…

  • High 7.5
    CVE-2024-25731 Public exploit

    The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can…