Skip to content
OpenAdvisories

Archive

7 March 2024

Vulnerabilities first published on this day (UTC), newest first.

← February 2024 2024 / March /7 April 2024 →
  1. 1124
  2. 269
  3. 330
  4. 4116
  5. 5116
  6. 6120
  7. 795
  8. 8103
  9. 924
  10. 1010
  11. 1191
  12. 12187
  13. 13222
  14. 1469
  15. 15131
  16. 1650
  17. 1731
  18. 18194
  19. 19132
  20. 20167
  21. 21127
  22. 2281
  23. 2317
  24. 2416
  25. 25123
  26. 26158
  27. 27285
  28. 28180
  29. 29156
  30. 3026
  31. 3167
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.9
    CVE-2024-2044 Public exploit EPSS 79%

    Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4

    pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code execut…

    pgadmin.org pgAdmin 4 pgadmin4 PyPI
  • Medium 5.4
    CVE-2023-51281 Public exploit

    Cross Site Scripting vulnerability in Customer Support System v.1.0 allows a remote attacker to escalate privileges via…

  • Critical 9.8
    CVE-2023-49989 Public exploit

    Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.ph…

  • High 7.5
    CVE-2023-49988 Public exploit

    Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the npss parameter at rooms.p…

  • Medium 5.4
    CVE-2023-49987 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allo…

  • Medium 4.7
    CVE-2023-49986 Public exploit

    A cross-site scripting (XSS) vulnerability in the component /admin/parent of School Fees Management System 1.0 allow at…

  • Medium 6.1
    CVE-2024-24035 Public exploit

    Cross Site Scripting (XSS) vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hm…

  • High 8.1
    CVE-2024-22752 Public exploit

    Insecure permissions issue in EaseUS MobiMover 6.0.5 Build 21620 allows attackers to gain escalated privileges via use …