by Kastro CVE-2023-7039 · Byzoro S210
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 497 of 784
Byzoro
Projectworlds Pvt. Limited
CVE-2023-48689 · Projectworlds Pvt. Limited Railway Reservation System
Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48718 · Projectworlds Pvt. Limited Student Result Management System
Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48685 · Projectworlds Pvt. Limited Railway Reservation System
Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48687 · Projectworlds Pvt. Limited Railway Reservation System
Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48716 · Projectworlds Pvt. Limited Student Result Management System
Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48720 · Projectworlds Pvt. Limited Student Result Management System
Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48722 · Projectworlds Pvt. Limited Student Result Management System
Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Tongda
CVE-2023-7022 · Tongda OA 2017
Tongda OA 2017 delete_all.php sql injection
CVE-2023-7023 · Tongda OA 2017
Tongda OA 2017 delete.php sql injection
CVE-2023-7020 · Tongda OA 2017
Tongda OA 2017 view.php sql injection
CVE-2023-7021 · Tongda OA 2017
Tongda OA 2017 delete_search.php sql injection
mitre
CVE-2023-51035 · mitre
TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
CVE-2023-51707 · mitre
MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets.
CVE-2023-51011 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the set…
CVE-2023-51012 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the se…
CVE-2023-51013 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the se…
CVE-2023-51016 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of t…
CVE-2023-51017 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanC…
CVE-2023-51018 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWi…
CVE-2023-51019 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiF…
CVE-2023-51020 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the set…
CVE-2023-51021 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRpt…
CVE-2023-51022 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the set…
CVE-2023-51023 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost…
CVE-2023-51024 · mitre
TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg…
CVE-2023-51027 · mitre
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of th…
CVE-2023-51028 · mitre
TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the se…
CVE-2023-51033 · mitre
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.
CVE-2022-47532 · mitre
FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users§ion=cpanel&page=list request.
totolink
CVE-2023-50147 · totolink a3700r_firmware
There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOlink A3700R router d…
CVE-2023-51034 · totolink ex1200l_firmware
TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.
CVE-2023-51014 · totolink ex1800t_firmware
TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the set…
CVE-2023-51015 · totolink ex1800t_firmware
TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interfac…
CVE-2023-51025 · totolink ex1800t_firmware
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the s…
CVE-2023-51026 · totolink ex1800t_firmware
TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebo…
Apache Software Foundation
CVE-2023-51656 · Apache Software Foundation Apache IoTDB
Apache IoTDB: Unsafe deserialize map in Sync Tool
nextcloud
CVE-2023-49792 · nextcloud security-advisories
Bruteforce protection can be bypassed with misconfigured proxy
Hakan Demiray
CVE-2023-49778 · Hakan Demiray Sayfa Sayac
WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to PHP Object Injection
xTemos
CVE-2023-32242 · xTemos WoodMart - Multipurpose WooCommerce Theme
WordPress Woodmart Core Plugin <= 1.0.36 is vulnerable to PHP Object Injection
Kashipara Group
CVE-2023-49677 · Kashipara Group Job Portal
Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49681 · Kashipara Group Job Portal
Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49688 · Kashipara Group Job Portal
Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-49689 · Kashipara Group Job Portal
Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
SourceCodester
CVE-2023-7058 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System path traversal
Glen Don L. Mongaya
CVE-2022-45377 · Glen Don L. Mongaya Drag and Drop Multiple File Upload for WooCommerce
WordPress Drag and Drop Multiple File Upload for WooCommerce Plugin <= 1.0.8 is vulnerable to Multiple Vulnerabilities
PenciDesign
CVE-2023-49826 · PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme
WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection
İstanbul Soft Informatics and Consultancy Limited Company
CVE-2023-6145 · İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software