Skip to content
OpenAdvisories

Archive

30 July 2024

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Low 3.1

    The fuels-ts typescript SDK has no awareness of to-be-spent transactions

    fuels-ts is a library for interacting with Fuel v2. The typescript SDK has no awareness of to-be-spent transactions causing some transactions to fail or silently get pruned as they are funded with already used UTXOs. The problem occurs, because the `fund` fun…

  • Low 3.5

    Overly Verbose Errors in SAML Integration

    In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations

  • Low 3.7

    IBM Security Directory Integrator information disclosure

    IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to ob…

  • Low 3.5

    SourceCodester Insurance Management System Edit Insurance Policy Page update_policy cross site scripting

    A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/update_policy of the component Edit Insurance Policy Page. The manipulation of the …

  • Low 3.5

    SourceCodester/Campcodes School Log Management System ajax.php cross site scripting

    A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=save_student. Executing manipulation of the argument Name can lead to cross site scripting. The attack may b…

  • Low 2.6

    TOTOLINK LR1200 shadow.sample hard-coded password

    A vulnerability was found in TOTOLINK LR1200 9.3.1cu.2832. It has been classified as problematic. This affects an unknown part of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The complexity of an attack is rather high. Th…