Skip to content
OpenAdvisories

Archive

7 June 2026

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 2.4

    SourceCodester Hospitals Patient Records Management System page room_types cross site scripting

    A vulnerability was detected in SourceCodester Hospitals Patient Records Management System 1.0. This issue affects some unknown processing of the file /admin/?page=room_types. Performing a manipulation of the argument room results in cross site scripting. The…

  • Low 3.1

    songquanpeng one-api Redemption Code Top-Up Endpoint redemption.go Redeem logic error

    A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic erro…

  • Low 3.1

    JeecgBoot User List Endpoint SysUserController.java queryPageList information disclosure

    A vulnerability was identified in JeecgBoot up to 3.9.2. Affected by this vulnerability is the function queryPageList of the file src\main\java\org\jeecg\modules\system\controller\SysUserController.java of the component User List Endpoint. The manipulation of…

  • Low 3.3

    SecureAge CatchPulse IOCTL saappctl.sys information disclosure

    A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach…