by Kastro CVE-2023-50919 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 490 of 784
mitre
CVE-2023-51984 · mitre
D-Link DIR-822+ V1.0.2 was found to contain a command injection in SetStaticRouteSettings function.
CVE-2023-52028 · mitre
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setTracerouteCfg…
CVE-2023-52029 · mitre
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setDiagnosisCfg f…
CVE-2023-52030 · mitre
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg func…
CVE-2023-52031 · mitre
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the UploadFirmwareFil…
CVE-2024-22942 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the hostName parameter in the set…
CVE-2024-23059 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the username parameter in the set…
CVE-2024-23060 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDmzCfg…
CVE-2024-23061 · mitre
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setSc…
CVE-2023-51350 · mitre
A spoofing attack in ujcms v.8.0.2 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted scri…
CVE-2023-51987 · mitre
D-Link DIR-822+ V1.0.2 contains a login bypass in the HNAP1 interface, which allows attackers to log in to administrator accounts with em…
CVE-2023-30014 · mitre
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sen…
CVE-2023-30015 · mitre
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sen…
CVE-2023-52027 · mitre
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the NTPSyncWithHost f…
CVE-2023-52032 · mitre
TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
CVE-2022-48620 · mitre
uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.
CVE-2023-30016 · mitre
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sen…
CVE-2023-37117 · mitre
A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP.
WWBN
CVE-2023-48728 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master…
CVE-2023-47861 · WWBN AVideo
A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commi…
CVE-2023-47862 · WWBN AVideo
A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb.
CVE-2023-49599 · WWBN AVideo
An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb.
totolink
CVE-2024-23057 · totolink a3300r_firmware
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the tz parameter in the setNtpCfg…
CVE-2024-23058 · totolink a3300r_firmware
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the pass parameter in the setTr06…
CVE-2023-52026 · totolink ex1800t
TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled…
DeShang
CVE-2024-0417 · DeShang DSShop
DeShang DSShop MemberAuth.php path traversal
CVE-2024-0416 · DeShang DSMall
DeShang DSMall MemberAuth.php path traversal
CVE-2024-0412 · DeShang DSShop
DeShang DSShop HTTP GET Request install.php access control
CVE-2024-0413 · DeShang DSKMS
DeShang DSKMS install.php access control
CVE-2024-0414 · DeShang DSCMS
DeShang DSCMS install.php access control
CVE-2024-0415 · DeShang DSMall
DeShang DSMall Image URL TaobaoExport.php access control
SourceCodester
CVE-2024-0389 · SourceCodester Student Attendance System
SourceCodester Student Attendance System attendance_report.php sql injection
hyperledger
CVE-2024-21669 · hyperledger aries-cloudagent-python
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
saadiqbal
CVE-2023-6875 · saadiqbal Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App
POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress <= 2.8.7 - Authorization Bypass via type connect-app API
thimpress
CVE-2023-6567 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
LearnPress <= 4.2.5.7 - Unauthenticated SQL Injection via order_by
CVE-2023-6634 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
LearnPress <= 4.2.5.7 - Command Injection
Azure
inc2734
piotnetdotcom
CVE-2023-6220 · piotnetdotcom Piotnet Forms
Piotnet Forms <= 1.0.28 - Unauthenticated Arbitrary File Upload
Apple
Rexroth
CVE-2023-48262 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code…
CVE-2023-48263 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code…
CVE-2023-48264 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code…
CVE-2023-48265 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code…
CVE-2023-48266 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code…
CVE-2023-48251 · Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001)
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.
aresit
CVE-2023-6699 · aresit WP Compress – Instant Performance & Speed Optimization