Skip to content
OpenAdvisories

Archive

7 March 2025

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Low 3.1

    PHPGurukul Online Library Management System change-password.php password recovery

    A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number…

  • Low 1.0

    Silicon Labs CPC can leak information in full duplex SPI

    A buffer overread can occur in the CPC application when operating in full duplex SPI upon receiving an invalid packet over the SPI interface.

  • Low 2.1

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the v…

  • Low 2.1

    QTS, QuTS hero

    A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in the …

  • Low 2.1

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the v…

  • Low 2.1

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5.2.x …

  • Low 3.5

    StarSea99 starsea-mall update cross site scripting

    A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attac…

  • Low 3.5

    StarSea99 starsea-mall update cross site scripting

    A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/update. The manipulation of the argument redirectUrl leads to cross site scripting. The attack can be in…

  • Low 3.5

    StarSea99 starsea-mall save cross site scripting

    A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The manipulation of the argument redirectUrl leads to cross site scripting. It is possible to initiate the …

  • Low 3.5

    PHPGurukul Human Metapneumovirus Testing Management System Search Report Page search-report.php cross site scripting

    A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /search-report.php of the component Search Report Page. The manipulation leads to c…

  • Low 3.2

    operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline walle…