The archive.

CVE-2023-50992 · mitre

Tenda i29 v1.0 V1.0.0.5 was discovered to contain a stack overflow via the ip parameter in the setPing function.

EPSS 0.8%CVSS 9.8

CVE-2023-50477 · mitre

An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js.

CVE-2023-51048 · mitre

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.

CVE-2023-51049 · mitre

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.

CVE-2023-51050 · mitre

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.

CVE-2023-51052 · mitre

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.

CVE-2023-29487 · mitre

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cau…

EPSS 0.7%CVSS 9.1

CVE-2023-50475 · mitre

An issue was discovered in bcoin-org bcoin version 2.2.0, allows remote attackers to obtain sensitive information via weak hashing algori…

EPSS 0.5%CVSS 9.1

Amazing Little poll1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-6768 · Amazing Little poll Amazing Little poll

Authentication bypass vulnerability in Amazing Little Poll

Jeff Starr1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-45603 · Jeff Starr User Submitted Posts – Enable Users to Submit Posts from the Front End

WordPress User Submitted Posts Plugin <= 20230902 is vulnerable to Arbitrary File Upload

M-Files Corporation1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-6912 · M-Files Corporation M-Files Server

Brute force vulnerability in M-Files user authentication

WPChill1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2023-34007 · WPChill Download Monitor

WordPress Download Monitor Plugin <= 4.8.3 is vulnerable to Arbitrary File Upload

EPSS 0.9%CVSS 9.9

Zendrop1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2023-25970 · Zendrop Zendrop – Global Dropshipping

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

EPSS 0.9%CVSS 10.0

Akshay Menariya1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-34385 · Akshay Menariya Export Import Menus

WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload

AmaderCode Lab1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-31215 · AmaderCode Lab Dropshipping & Affiliation with Amazon

WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload

Favethemes1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-29432 · Favethemes Houzez - Real Estate WordPress Theme

WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-35895 · IBM Informix JDBC

IBM Informix JDBC code execution

EPSS 0.9%CVSS 9.8

CVE-2023-47702 · IBM Security Guardium Key Lifecycle Manager

IBM Security Guardium Key Lifecycle Manager directory traversal

EPSS 1.0%CVSS 9.1

Phpbits Creative Studio1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-49772 · Phpbits Creative Studio Genesis Simple Love

WordPress Genesis Simple Love Plugin <= 2.0 is vulnerable to PHP Object Injection

EPSS 0.7%CVSS 10.0

Themify1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-46149 · Themify Themify Ultra

WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload

EPSS 0.7%CVSS 9.9

Tim Brattberg1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-49773 · Tim Brattberg BCorp Shortcodes

WordPress BCorp Shortcodes Plugin <= 0.23 is vulnerable to PHP Object Injection

EPSS 0.7%CVSS 10.0

WooCommerce1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-33318 · WooCommerce AutomateWoo

WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload

WooRockets1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-23970 · WooRockets Corsa

WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload

Automattic1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-35915 · Automattic WooPayments – Fully Integrated Solution Built and Supported by Woo

WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection

Hakan Demiray1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-49776 · Hakan Demiray Sayfa Sayac

WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection

huggingface1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2023-7018 · huggingface huggingface/transformers

Deserialization of Untrusted Data in huggingface/transformers

EPSS 0.7%CVSS 9.6

Projectworlds Pvt. Limited2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-48433 · Projectworlds Pvt. Limited Online Voting System Project

Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-48434 · Projectworlds Pvt. Limited Online Voting System Project

Online Voting System Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Unlimited Elements1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2023-31231 · Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates)

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) Plugin <= 1.5.65 is vulnerable to Arbitrary File Upload

EPSS 0.7%CVSS 9.9

Olive Themes1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2023-29102 · Olive Themes Olive One Click Demo Import

WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

EPSS 0.8%CVSS 9.1

Premio1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2023-40204 · Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager

WordPress Folders Plugin <= 2.9.2 is vulnerable to Arbitrary File Upload

EPSS 0.8%CVSS 9.1

realmag7771 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-40010 · realmag777 HUSKY – Products Filter for WooCommerce Professional

WordPress HUSKY – Products Filter for WooCommerce (formerly WOOF) Plugin <= 1.3.4.2 is vulnerable to SQL Injection

Rocketgenius Inc.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-28782 · Rocketgenius Inc. Gravity Forms

WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection

Spoon themes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-49752 · Spoon themes Adifier - Classified Ads WordPress Theme

WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection

Themely1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2023-28170 · Themely Theme Demo Import

WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

EPSS 0.8%CVSS 9.1

UX-themes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-40555 · UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme

WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

ClickHouse1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-47118 · ClickHouse ClickHouse

Heap buffer overflow in T64 codec decompression