by Kastro CVE-2024-21650 · xwiki xwiki-platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 492 of 784
xwiki
mitre
CVE-2023-49237 · mitre
An issue was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices.
CVE-2023-50643 · mitre
An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClil…
CVE-2023-50982 · mitre
Stud.IP 5.x through 5.3.3 allows XSS with resultant upload of executable files, because upload_action and edit_action in Admin_SmileysCon…
CVE-2023-50585 · mitre
Tenda A18 v15.13.07.09 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
CVE-2023-49236 · mitre
A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution.
CVE-2023-26999 · mitre
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a craf…
CVE-2023-49235 · mitre
An issue was discovered in libremote_dbg.so on TRENDnet TV-IP1314PI 5.5.3 200714 devices.
CVE-2023-49238 · mitre
In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation (in certain installation scenarios…
CVE-2023-51717 · mitre
Dataiku DSS before 11.4.5 and 12.4.1 has Incorrect Access Control that could lead to a full authentication bypass.
CVE-2024-22216 · mitre
In default installations of Microchip maxView Storage Manager (for Adaptec Smart Storage Controllers) where Redfish server is configured…
Byzoro
CVE-2024-0300 · Byzoro Smart S150 Management Platform
Byzoro Smart S150 Management Platform HTTP POST Request userattestation.php unrestricted upload
Totolink
CVE-2024-0293 · Totolink LR1200GB
Totolink LR1200GB cstecgi.cgi setUploadSetting os command injection
CVE-2024-0294 · Totolink LR1200GB
Totolink LR1200GB cstecgi.cgi setUssd os command injection
CVE-2024-0296 · Totolink N200RE
Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection
CVE-2024-0297 · Totolink N200RE
Totolink N200RE cstecgi.cgi UploadFirmwareFile os command injection
CVE-2024-0298 · Totolink N200RE
Totolink N200RE cstecgi.cgi setDiagnosisCfg os command injection
CVE-2024-0299 · Totolink N200RE
Totolink N200RE cstecgi.cgi setTracerouteCfg os command injection
CVE-2023-7219 · Totolink N350RT
Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
CVE-2023-7220 · Totolink NR1800X
Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow
CVE-2024-0292 · Totolink LR1200GB
Totolink LR1200GB cstecgi.cgi setOpModeCfg os command injection
CVE-2024-0295 · Totolink LR1200GB
Totolink LR1200GB cstecgi.cgi setWanCfg os command injection
ManageEngine
DEMON1A
gpac
Kashipara
CVE-2024-0287 · Kashipara Food Management System
Kashipara Food Management System itemBillPdf.php sql injection
CVE-2024-0290 · Kashipara Food Management System
Kashipara Food Management System stock_edit.php sql injection
CVE-2024-0288 · Kashipara Food Management System
Kashipara Food Management System rawstock_used_damaged_submit.php sql injection
CVE-2024-0289 · Kashipara Food Management System
Kashipara Food Management System stock_entry_submit.php sql injection
Azure
Ivanti
Open-Xchange GmbH
fhs-opensource
CVE-2024-0302 · fhs-opensource iparking
fhs-opensource iparking vueLogin deserialization
CVE-2024-0301 · fhs-opensource iparking
fhs-opensource iparking PayTempOrderAction.java getData sql injection
VulDB
Anton Bond
CVE-2023-52218 · Anton Bond Woocommerce Tranzila Payment Gateway
WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection
Gecka
CVE-2023-52219 · Gecka Gecka Terms Thumbnails
WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection
PrestaShow
CVE-2023-6921 · PrestaShow PrestaShop Google Integrator
SQL Injection in PrestaShop Google Integrator
Tagbox
CVE-2023-52225 · Tagbox Tagbox – UGC Galleries, Social Media Widgets, User Reviews & Analytics
WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection
UkrSolution
CVE-2023-52215 · UkrSolution Simple Inventory Management – just scan barcode to manage products and orders. For WooCommerce
WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection
SAP_SE
CVE-2024-21737 · SAP_SE SAP Application Interface Framework (File Adapter)
Code Injection vulnerability in SAP Application Interface Framework (File Adapter)
SVNLabs Softwares
CVE-2023-52202 · SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free
WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection
CVE-2023-52205 · SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free
WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection
CVE-2023-52207 · SVNLabs Softwares HTML5 MP3 Player with Playlist Free
WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection
Repute Infosystems
CVE-2023-52200 · Repute Infosystems ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup