Skip to content
OpenAdvisories

Archive

20 September 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Low 3.8

    Qemu-kvm: information leak in virtio devices

    A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has…

  • Low 2.3

    code-projects Blood Bank Management System Password cleartext storage in a file or on disk

    A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has …

  • Low 3.5

    SourceCodester Best House Rental Management System ajax.php cross site scripting

    A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_category. The manipulation of the argument nam…

  • Low 3.5

    CodeCanyon CRMGo SaaS show cross site scripting

    A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scriptin…

  • Low 3.5

    CodeCanyon CRMGo SaaS note cross site scripting

    A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remot…