by Kastro CVE-2024-0769 · D-Link DIR-859
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 486 of 784
D-Link
Jenkins Project
badaix
dlink
Uniview
mitre
CVE-2024-22663 · mitre
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a command Injection vulnerability via setOpModeCfg
CVE-2023-51885 · mitre
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX…
CVE-2023-51889 · mitre
Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code v…
CVE-2023-48118 · mitre
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted requ…
CVE-2024-22751 · mitre
D-Link DIR-882 DIR882A1_FW130B06 was discovered to contain a stack overflow via the sub_477AA0 function.
CVE-2024-23752 · mitre
GenerateSDFPipeline in synthetic_dataframe in PandasAI (aka pandas-ai) through 1.5.17 allows attackers to trigger the generation of arbit…
CVE-2023-33759 · mitre
SpliceCom Maximiser Soft PBX v1.5 and before does not restrict excessive authentication attempts, allowing attackers to bypass authentica…
CVE-2023-52038 · mitre
An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415C80 function.
CVE-2023-52039 · mitre
An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_415AA4 function.
CVE-2024-22660 · mitre
TOTOLINK_A3700R_V9.1.2u.6165_20211012has a stack overflow vulnerability via setLanguageCfg
CVE-2024-22662 · mitre
TOTOLINK A3700R_V9.1.2u.6165_20211012 has a stack overflow vulnerability via setParentalRules
CVE-2023-31654 · mitre
Redis raft master-1b8bd86 to master-7b46079 was discovered to contain an ODR violation via the component hiredisAllocFns at /opt/fs/redis…
CVE-2024-23751 · mitre
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQ…
CVE-2023-51887 · mitre
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in app…
CVE-2021-42141 · mitre
An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30.
CVE-2023-51210 · mitre
SQL injection vulnerability in Webkul Bundle Product 6.0.1 allows a remote attacker to execute arbitrary code via the id_product paramete…
CVE-2024-22076 · mitre
MyQ Print Server before 8.2 patch 43 allows remote authenticated administrators to execute arbitrary code via PHP scripts that are reache…
CVE-2024-23730 · mitre
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_l…
CVE-2021-42142 · mitre
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.
CVE-2023-35837 · mitre
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02.
CVE-2024-23731 · mitre
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function a…
CVE-2024-23771 · mitre
darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to by…
CVE-2023-51924 · mitre
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v3_23.05 allows attackers to exec…
CVE-2023-51925 · mitre
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 a…
CVE-2023-51928 · mitre
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction() method of YonBIP v3_23.05 a…
CVE-2021-42144 · mitre
Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via cra…
CVE-2021-42143 · mitre
An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97.
CVE-2021-42147 · mitre
Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote atta…
CVE-2023-51927 · mitre
YonBIP v3_23.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runS…
CVE-2023-35835 · mitre
An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02.
Project Worlds
CVE-2024-0783 · Project Worlds Online Admission System
Project Worlds Online Admission System documents.php unrestricted upload
benbusby
CVE-2024-22203 · benbusby whoogle-search
Whoogle Search Server Side Request Forgery vulnerability
CVE-2024-22205 · benbusby whoogle-search
Whoogle Search Server Side Request Forgery vulnerability
totolink
CVE-2023-52040 · totolink x6000r_firmware
An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function.
CVE-2024-22529 · totolink x2000r
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of…
Apache Software Foundation
CVE-2023-49657 · Apache Software Foundation Apache Superset
Apache Superset: Stored XSS in Dashboard Title and Chart Title
UkrSolution
CVE-2023-52221 · UkrSolution Barcode Scanner and Inventory manager
WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload
Omron
CVE-2022-45790 · Omron CJ-series and CS-series CPU modules
Omron FINS memory protection susceptible to bruteforce
Thomas Belser
CVE-2024-22284 · Thomas Belser Asgaros Forum
WordPress Asgaros Forum Plugin <= 2.7.2 is vulnerable to PHP Object Injection
QuantumCloud
CVE-2024-22309 · QuantumCloud ChatBot with AI