Skip to content
OpenAdvisories

Archive

15 August 2024

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Low 3.5

    SourceCodester Online Graduate Tracer System add_acc.php cross site scripting

    A vulnerability has been found in SourceCodester Online Graduate Tracer System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /tracking/admin/add_acc.php. The manipulation of the argument name/user/po…

  • Low 2.1

    Uninitialized variable in Xpdf 4.05 due to invalid JPEG header

    In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address.

  • Low 2.1

    Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates

    In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.

  • Low 2.1

    Stack overflow in Xpdf 4.05 due to object loop in PDF pattern

    In Xpdf 4.05 (and earlier), a PDF object loop in a pattern resource leads to infinite recursion and a stack overflow.

  • Low 2.4
    CVE-2024-7815 Public exploit

    CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

    A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The…

  • Low 2.4

    CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting

    A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument …

  • Low 3.5

    SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting

    A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental_0/rental/ajax.php?action=save_tenant of the component POST Parameter Handler. The manipu…