Skip to content
OpenAdvisories

Archive

14 August 2024

Vulnerabilities first published on this day (UTC), newest first.

206 results · Feed

  • High 8.2

    Path traversal in the skin management component of Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to a…

  • High 7.5

    An off-by-one error in WLInfoRailService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash th…

  • High 7.5
    CVE-2024-37399 EPSS 28%

    A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to …

  • High 7.2

    Improper input validation in the Central Filestore in Ivanti Avalanche 6.3.1 allows a remote authenticated attacker wit…

  • Medium 6.3

    SourceCodester Clinics Patient Management System check_medicine_name.php sql injection

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ajax/check_medicine_name.php. The manipulation of the argument user_name leads to sql inj…

  • Medium 5.3

    SourceCodester Clinics Patient Management System user_images direct request

    A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user_images/. The manipulation leads to direct request. The attack can be initiated re…