by Kastro CVE-2024-0712 · Byzoro Smart S150 Management Platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 487 of 784
Byzoro
warfareplugins
CVE-2021-4434 · warfareplugins Social Sharing Plugin – Social Warfare
Social Warfare <= 3.5.2 - Remote Code Execution
mitre
CVE-2023-27168 · mitre
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp…
CVE-2023-50693 · mitre
An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request.
CVE-2023-50028 · mitre
In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform S…
CVE-2023-50030 · mitre
In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0.
CVE-2023-51947 · mitre
Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different typ…
CVE-2023-50694 · mitre
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing i…
CVE-2023-51892 · mitre
An issue in weaver e-cology v.10.0.2310.01 allows a remote attacker to execute arbitrary code via a crafted script to the FrameworkShellC…
CVE-2023-51906 · mitre
An issue in yonyou YonBIP v3_23.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServle…
CVE-2021-31314 · mitre
File upload vulnerability in ejinshan v8+ terminal security system allows attackers to upload arbitrary files to arbitrary locations on t…
CVE-2023-43985 · mitre
SunnyToo stblogsearch up to v1.0.0 was discovered to contain a SQL injection vulnerability via the StBlogSearchClass::prepareSearch compo…
CVE-2023-46351 · mitre
In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection.
CVE-2023-44077 · mitre
Studio Network Solutions ShareBrowser before 7.0 on macOS mishandles signature verification, aka PMP-2636.
FreeRDP
vyperlang
个人开源
ForU
SourceCodester
CVE-2024-0735 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System expense.php exec sql injection
VulDB
CVE-2024-0655 · VulDB
Novel-Plus list sql injection
CVE-2024-0603 · VulDB
ZhiCms giftcontroller.php deserialization
CVE-2024-0649 · VulDB
ZhiHuiYun Search ImageController.php download_network_image server-side request forgery
CVE-2024-0733 · VulDB
Smsot HTTP POST Request api.php sql injection
CVE-2024-0734 · VulDB
Smsot get.php sql injection
GitHub
CVE-2024-0200 · GitHub Enterprise Server
Unsafe Reflection in Github Enterprise Server leading to Command Injection
Project Worlds
CVE-2024-0730 · Project Worlds Online Time Table Generator
Project Worlds Online Time Table Generator course_ajax.php sql injection
themehigh
CVE-2024-0705 · themehigh Payment Gateway of Stripe for WooCommerce
Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection
Red Hat
CVE-2023-6816 · Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Xorg-x11-server: heap buffer overflow in devicefocusevent and procxiquerypointer
Totolink
Cisco
MiczFlor
CVE-2024-0714 · MiczFlor RPi-Jukebox-RFID
MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection
Montonio
CVE-2022-40700 · Montonio Montonio for WooCommerce
Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins
Cires21
CVE-2024-0643 · Cires21 C21 Live Encoder and Live Mosaic
Unrestricted upload of dangerous file types in C21 Live Encoder and Live Mosaic
CVE-2024-0642 · Cires21 C21 Live Encoder and Live Mosaic
Inadequate access control in C21 Live Encoder and Live Mosaic
nextcloud
CVE-2024-22212 · nextcloud security-advisories
Nextcloud global site selector authentication bypass
pyload
VulnCheck
shopware
Vagary Digital
CVE-2022-36418 · Vagary Digital HREFLANG Tags Lite
WordPress HREFLANG Tags Lite Plugin <= 2.0.0 is vulnerable to Broken Authentication
Mergen Software
CVE-2023-5806 · Mergen Software Quality Management System
SQLi in Mergen Soft Quality Management System
Progress Software Corporation
CVE-2023-40051 · Progress Software Corporation OpenEdge
Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
jupyter-lsp
CVE-2024-22415 · jupyter-lsp jupyterlab-lsp
Unsecured endpoints in the jupyter-lsp server extension
WP Job Portal
CVE-2022-41786 · WP Job Portal WP Job Portal – A Complete Job Board
WordPress WP Job Portal Plugin <= 2.0.1 is vulnerable to Broken Access Control
HCL Software
CVE-2023-37523 · HCL Software HCL BigFix OSD Bare Metal Server WebUI