Skip to content
OpenAdvisories

Archive

7 March 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-2044 Public exploit EPSS 79%

    Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

    pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execut…

  • Critical 9.8
    CVE-2023-49989 Public exploit

    Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.ph…