by Kastro CVE-2023-51092 · tenda m3_firmware
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 496 of 784
tenda
mitre
CVE-2022-34268 · mitre
An issue was discovered in RWS WorldServer before 11.7.3.
CVE-2023-49001 · mitre
An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the co…
CVE-2023-51097 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
CVE-2023-51084 · mitre
hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.
CVE-2023-51101 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
CVE-2023-51771 · mitre
In MicroHttpServer (aka Micro HTTP Server) through a8ab029, _ParseHeader in lib/server.c allows a one-byte recv buffer overflow via a lon…
CVE-2022-34267 · mitre
An issue was discovered in RWS WorldServer before 11.7.3.
CVE-2023-51091 · mitre
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
CVE-2023-47883 · mitre
The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an…
CVE-2023-49954 · mitre
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email addr…
CVE-2023-51098 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo .
CVE-2023-51099 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
CVE-2023-51100 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo .
CVE-2023-43955 · mitre
The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView.
CVE-2023-48654 · mitre
One Identity Password Manager before 5.13.1 allows Kiosk Escape.
CVE-2023-49000 · mitre
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with t…
CVE-2023-51094 · mitre
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
CVE-2023-51714 · mitre
An issue was discovered in the HTTP2 implementation in Qt before 5.15.17, 6.x before 6.2.11, 6.3.x through 6.5.x before 6.5.4, and 6.6.x…
CVE-2023-51763 · mitre
csv_builder.rb in ActiveAdmin (aka Active Admin) before 3.2.0 allows CSV injection.
CVE-2023-51093 · mitre
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
CVE-2023-51095 · mitre
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
CVE-2023-51090 · mitre
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
CVE-2023-51102 · mitre
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
CVE-2023-31224 · mitre
There is broken access control during authentication in Jamf Pro Server before 10.46.1.
code-projects
CVE-2023-7107 · code-projects E-Commerce Website
code-projects E-Commerce Website user_signup.php sql injection
CVE-2023-7109 · code-projects Library Management System
code-projects Library Management System login.php sql injection
CVE-2023-7110 · code-projects Library Management System
code-projects Library Management System login.php sql injection
CVE-2023-7105 · code-projects E-Commerce Website
code-projects E-Commerce Website index_search.php sql injection
CVE-2023-7097 · code-projects Water Billing System
code-projects Water Billing System addbill.php sql injection
CVE-2023-7111 · code-projects Library Management System
code-projects Library Management System index.php sql injection
CVE-2023-7096 · code-projects Faculty Management System
code-projects Faculty Management System crud.php sql injection
sshenzhen_tcl_new_technology_co_limited
CVE-2023-43481 · sshenzhen_tcl_new_technology_co_limited com.tcl.browser
An issue in Shenzhen TCL Browser TV Web BrowseHere (aka com.tcl.browser) 6.65.022_dab24cc6_231221_gp allows a remote attacker to execute…
Apache Software Foundation
CVE-2023-51467 · Apache Software Foundation Apache OFBiz
Apache OFBiz: Pre-authentication Remote Code Execution (RCE) vulnerability
Barracuda Networks Inc.
CVE-2023-7102 · Barracuda Networks Inc. Barracuda ESG Appliance
Remote Code Execution (RCE) Vulnerability
Totolink
WeiYe-Jing
migrate
Unknown
CVE-2023-5991 · Unknown Hotel Booking Lite
Hotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & Deletion
inisev
CVE-2023-6972 · inisev BackupBliss – Backup & Migration with Free Cloud Storage
Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion
linuxdeepin
CVE-2023-50254 · linuxdeepin developer-center
Deepin Reader RCE vulnerability due to a design flaw
CVE-2023-50255 · linuxdeepin developer-center
Zip Path Traversal in Deepin-Compressor
İzmir Katip Çelebi University
CVE-2023-6190 · İzmir Katip Çelebi University University Information Management System
Authenicated Path Traversal in İzmir Katip Çelebi University
rws
bacnet_protocol_stack_project
CVE-2023-51773 · bacnet_protocol_stack_project bacnet_protocol_stack
BACnet Stack before 1.3.2 has a decode function APDU buffer over-read in bacapp_decode_application_data in bacapp.c.
PHPGurukul
CVE-2023-7100 · PHPGurukul Restaurant Table Booking System
PHPGurukul Restaurant Table Booking System bwdates-report-details.php sql injection
CVE-2023-7099 · PHPGurukul Nipah Virus Testing Management System
PHPGurukul Nipah Virus Testing Management System bwdates-report-result.php sql injection
yiisoft
awslabs
CVE-2023-50928 · awslabs sandbox-accounts-for-events