Skip to content
OpenAdvisories

Archive

2 March 2025

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.3

    ESAFENET CDG updateorg.jsp sql injection

    A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql inj…

  • High 7.8

    ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC

    In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC There is a small race window at snd_pcm_oss_sync() that is called from OSS PCM SNDCTL_DSP_SYNC ioctl; namely the function calls snd_pcm_oss_make_re…

  • High 7.3

    pbrong hrms resource.go HrmsDB improper authorization

    A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \resource\resource.go. The manipulation of the argument user_cookie leads to improper authorization. It is possible to initia…

  • High 8.8

    Tenda AC6 WifiExtraSet stack-based overflow

    A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overf…

  • High 7.3

    AT Software Solutions ATSVD Login Endpoint login.aspx sql injection

    A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.aspx of the component Login Endpoint. The manipulation of the argument txtUsu…

  • High 7.3

    Pixsoft Sol Login Endpoint servlet sql injection

    A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pix_projetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manip…

  • High 7.3

    Pixsoft E-Saphira Login Endpoint servlet sql injection

    A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql inje…