by Kastro CVE-2023-50628 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 499 of 784
mitre
CVE-2023-47990 · mitre
SQL Injection vulnerability in components/table_manager/html/edit_admin_table.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL…
CVE-2023-50983 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the sysScheduleRebootSet function.
CVE-2023-50989 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a command injection vulnerability via the pingSet function.
CVE-2023-45887 · mitre
DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing…
CVE-2023-49004 · mitre
An issue in D-Link DIR-850L v.B1_FW223WWb01 allows a remote attacker to execute arbitrary code via a crafted script to the en parameter.
CVE-2023-49032 · mitre
An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information…
CVE-2023-47267 · mitre
An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise…
CVE-2023-50044 · mitre
Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.
CVE-2023-50984 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the ip parameter in the spdtstConfigAndStart function.
CVE-2023-50985 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the lanGw parameter in the lanCfgSet function.
CVE-2023-50987 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the time parameter in the sysTimeInfoSet function.
CVE-2023-50988 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the bandwidth parameter in the wifiRadioSetIndoor function.
CVE-2023-50990 · mitre
Tenda i29 v1.0 V1.0.0.5 was discovered to contain a buffer overflow via the rebootTime parameter in the sysScheduleRebootSet function.
CVE-2023-27172 · mitre
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens.
Ivanti
CVE-2023-41727 · Ivanti Wavelink
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46216 · Ivanti Wavelink
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46217 · Ivanti Wavelink
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46220 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46225 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46257 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46259 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46260 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46261 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46263 · Ivanti Avalanche
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacke…
CVE-2023-46264 · Ivanti Avalanche
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacke…
CVE-2023-46221 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46222 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46223 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46224 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46258 · Ivanti Avalanche
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial…
CVE-2023-46265 · Ivanti Avalanche
An unauthenticated could abuse a XXE vulnerability in the Smart Device Server to leak data or perform a Server-Side Request Forgery (SSRF).
CVE-2021-22962 · Ivanti Avalanche
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.
CVE-2023-46266 · Ivanti Avalanche
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.
EuroTel
CVE-2023-6928 · EuroTel ETL3100
Improper Restriction of Excessive Authentication Attempts
CVE-2023-6929 · EuroTel ETL3100
Authorization Bypass Through User-Controlled Key in EuroTel ETL3100
CVE-2023-6930 · EuroTel ETL3100
Improper Access Control in EuroTel ETL3100
Gordon Böhme, Antonio Leutsch
CVE-2023-49819 · Gordon Böhme, Antonio Leutsch Structured Content (JSON-LD) #wpsc
WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object Injection
Porto Theme
CVE-2023-48738 · Porto Theme Porto Theme - Functionality
WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL Injection
Rajnish Arora
CVE-2023-34027 · Rajnish Arora Recently Viewed Products
WordPress Recently Viewed Products Plugin <= 1.0.0 is vulnerable to PHP Object Injection
Spoonthemes
CVE-2023-49750 · Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme
WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injection
tenda
Themesflat
CVE-2023-37390 · Themesflat Themesflat Addons For Elementor
WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection
Unknown
EFACEC
Hewlett Packard Enterprise (HPE)
CVE-2023-50272 · Hewlett Packard Enterprise (HPE) HPE Integrated Lights-out 5 (iLO 5), HPE Integrated Lights-out 6 (iLO 6),
A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 6 (iLO 6).
huggingface
CVE-2023-6730 · huggingface huggingface/transformers
Deserialization of Untrusted Data in huggingface/transformers
Clever plugins
CVE-2023-47754 · Clever plugins Delete Duplicate Posts