by Kastro CVE-2024-0195 · VulDB
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 494 of 784
VulDB
mitre
CVE-2023-50651 · mitre
TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bi…
CVE-2023-50578 · mitre
Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.
CVE-2023-41542 · mitre
SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information…
CVE-2023-49442 · mitre
Deserialization of Untrusted Data in jeecgFormDemoController in JEECG 4.0 and earlier allows attackers to run arbitrary code via crafted…
CVE-2023-41544 · mitre
SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to t…
CVE-2023-52252 · mitre
Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the R…
CVE-2023-41543 · mitre
SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the…
CVE-2023-46308 · mitre
In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.
CVE-2023-52262 · mitre
outdoorbits little-backup-box (aka Little Backup Box) before f39f91c allows remote attackers to execute arbitrary code because the PHP ex…
CVE-2023-50090 · mitre
Arbitrary File Write vulnerability in the saveReportFile method of ureport2 2.2.9 and before allows attackers to write arbitrary files an…
CVE-2023-50589 · mitre
Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page.
CVE-2023-47458 · mitre
An issue in SpringBlade v.3.7.0 and before allows a remote attacker to escalate privileges via the lack of permissions control framework.
CVE-2023-51133 · mitre
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
CVE-2023-51135 · mitre
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
CVE-2023-51136 · mitre
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
CVE-2023-39655 · mitre
A host header injection vulnerability exists in the NPM package @perfood/couch-auth versions <= 0.20.0.
CVE-2023-50921 · mitre
An issue was discovered on GL.iNet devices through 4.5.0.
mehah
Campcodes
CVE-2023-7175 · Campcodes Online College Library System
Campcodes Online College Library System HTTP POST Request borrow_add.php sql injection
CodeAstro
CVE-2024-0194 · CodeAstro Internet Banking System
CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload
MediaTek, Inc.
CVE-2023-32874 · MediaTek, Inc. MT2735, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6813, MT6833, MT6833P, MT6835, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6877T, MT6878, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6980, MT6980D, MT6983T, MT6983W, MT6983Z, MT6985, MT6985T, MT6989, MT6990
In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check.
synth
CVE-2024-21632 · synth omniauth-microsoft_graph
omniauth-microsoft_graph vulnerable to account takeover (nOAuth)
ARI Soft
CVE-2023-52182 · ARI Soft ARI Stream Quiz – WordPress Quizzes Builder
WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection
Bertha.ai
CVE-2023-51419 · Bertha.ai BERTHA AI. Your AI co-pilot for WordPress and Chrome
WordPress BERTHA AI Plugin <= 1.11.10.7 is vulnerable to Arbitrary File Upload
Joris van Montfort
CVE-2023-51417 · Joris van Montfort JVM Gutenberg Rich Text Icons
WordPress JVM rich text icons Plugin <= 1.2.3 is vulnerable to Arbitrary File Upload
Presslabs
rust-vmm
Shabti Kaplan
CVE-2023-51411 · Shabti Kaplan Frontend Admin by DynamiApps
WordPress Frontend Admin by DynamiApps Plugin <= 3.18.3 is vulnerable to Arbitrary File Upload
Soft8Soft LLC
CVE-2023-51421 · Soft8Soft LLC Verge3D Publishing and E-Commerce
WordPress Verge3D Plugin <= 4.5.2 is vulnerable to Arbitrary File Upload
WPVibes
Mestres do WP
CVE-2023-51469 · Mestres do WP Checkout Mestres WP
WordPress Checkout Mestres WP Plugin <= 7.1.9.6 is vulnerable to SQL Injection
Piotnet
Saleswonder Team
CVE-2023-51423 · Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition
WordPress WebinarIgnition Plugin <= 3.05.0 is vulnerable to SQL Injection
SourceCodester
CVE-2024-0182 · SourceCodester Engineers Online Portal
SourceCodester Engineers Online Portal Admin Login sql injection
Crocoblock
CVE-2023-39157 · Crocoblock JetElements For Elementor
WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
Ekol Informatics
CVE-2023-6436 · Ekol Informatics Website Template
SQLi in Ekol Bilisim Website Template
misskey-dev
YITH
CVE-2023-49777 · YITH YITH WooCommerce Product Add-Ons
WordPress YITH WooCommerce Product Add-Ons Plugin <= 4.3.0 is vulnerable to PHP Object Injection
Qualcomm, Inc.
CVE-2023-33025 · Qualcomm, Inc. Snapdragon
Buffer Copy without Checking Size of Input in Data Modem
CVE-2023-33030 · Qualcomm, Inc. Snapdragon
Buffer Copy without Checking Size of Input in HLOS
CVE-2023-33032 · Qualcomm, Inc. Snapdragon
Integer Overflow or Wraparound in TZ Secure OS
silabs.com
CVE-2023-48418 · Google Pixel Watch
User Build misconfiguration resulting in local escalation of privilege
CVE-2023-48419 · Google Google Nest Mini
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP
CVE-2023-6339 · Google Wifi Pro