The archive.

CVE-2023-50965 · mitre

In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and…

CVE-2021-42796 · mitre

An issue was discovered in ExecuteCommand() in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior that allows unauthentic…

CVE-2023-50918 · mitre

app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.

PHZ761 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-6888 · PHZ76 RtspServer

PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

rmountjoy922 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-6899 · rmountjoy92 DashMachine

rmountjoy92 DashMachine Config save_config code injection

EPSS 1%public exploit CVSS 9.8

CVE-2023-6900 · rmountjoy92 DashMachine

rmountjoy92 DashMachine delete_file path traversal

EPSS 1%CVSS 9.1

saysky1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-6887 · saysky ForestBlog

saysky ForestBlog Image Upload img unrestricted upload

EPSS 0.9%public exploit CVSS 9.8

tutao1 vulnerability on this pageMax CVSS 9.3Priority 52KEV 0

CVE-2023-46116 · tutao tutanota

Remote Code Execution via insufficiently sanitized call to shell.openExternal

EPSS 1%public exploit CVSS 9.3

kalcaddle6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-6853 · kalcaddle KodExplorer

kalcaddle KodExplorer app.php index server-side request forgery

EPSS 0.7%public exploit CVSS 9.8

CVE-2023-6848 · kalcaddle kodbox

kalcaddle kodbox index.class.php check command injection

CVE-2023-6851 · kalcaddle KodExplorer

kalcaddle KodExplorer ZIP Archive app.php unzipList code injection

CVE-2023-6849 · kalcaddle kodbox

kalcaddle kodbox app.php cover server-side request forgery

CVE-2023-6850 · kalcaddle KodExplorer

kalcaddle KodExplorer API Endpoint unrestricted upload

CVE-2023-6852 · kalcaddle KodExplorer

kalcaddle KodExplorer app.php server-side request forgery

Netentsec1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-6903 · Netentsec NS-ASG Application Security Gateway

Netentsec NS-ASG Application Security Gateway sql injection

EPSS 0.7%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-6898 · SourceCodester Best Courier Management System

SourceCodester Best Courier Management System manage_user.php sql injection

EPSS 0.6%public exploit CVSS 9.8

xwiki3 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2023-50721 · xwiki xwiki-platform

XWiki Platform RCE from account through SearchAdmin

EPSS 79%CVSS 10.0

CVE-2023-50723 · xwiki xwiki-platform

XWiki Platform remote code execution/programming rights with configuration section from any user account

EPSS 1%CVSS 10.0

CVE-2023-50722 · xwiki xwiki-platform

XWiki Platform XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass

EPSS 0.7%CVSS 9.7

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-29234 · Apache Software Foundation Apache Dubbo

Bypass serialize checks in Apache Dubbo

EPSS 7%CVSS 9.8

CVE-2023-46279 · Apache Software Foundation Apache Dubbo

Apache Dubbo: Bypass deny serialize list check in Apache Dubbo

codelyfe3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-6901 · codelyfe Stupid Simple CMS

codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injection

EPSS 3%CVSS 9.8

CVE-2023-6902 · codelyfe Stupid Simple CMS

codelyfe Stupid Simple CMS upload.php unrestricted upload

EPSS 1.0%CVSS 9.8

CVE-2023-6907 · codelyfe Stupid Simple CMS

codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication

EPSS 1%CVSS 9.1

IDEMIA5 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-33222 · IDEMIA SIGMA Lite & Lite +

Stack buffer overflow when reading DESFire card

CVE-2023-33218 · IDEMIA SIGMA Lite & Lite +

Stack Buffer Overflow in a binary run at upgrade startup

CVE-2023-33219 · IDEMIA SIGMA Lite & Lite +

Stack Buffer Overflow when checking retrofit package

CVE-2023-33220 · IDEMIA SIGMA Lite & Lite +

Stack Buffer Overflow when checking some attributes during retrofit

CVE-2023-33221 · IDEMIA SIGMA Lite & Lite +

Heap Buffer Overflow when reading DESFire card

inc27341 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-6559 · inc2734 MW WP Form

MW WP Form <= 5.0.3 - Improper Limitation of File Name to Unauthenticated Arbitrary File Deletion

ADiTaaS1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-6483 · ADiTaaS Allied Digital Integrated Tool-as-a-Service

Improper Authentication Vulnerability in ADiTaaS

Multisuns2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-48390 · Multisuns EasyLog web+

Multisuns EasyLog web+ - Command Injection

CVE-2023-48388 · Multisuns EasyLog web+

Multisuns EasyLog web+ - Use of Hard-coded Password

ArmorX Global Technology Corporation1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-48384 · ArmorX Global Technology Corporation ArmorX Spam

ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin

ITPison2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-48371 · ITPison OMICARD EDM 's SMS

ITPison OMICARD EDM 's SMS - Arbitrary File Upload

EPSS 1.0%CVSS 9.8

CVE-2023-48372 · ITPison OMICARD EDM 's SMS

ITPison OMICARD EDM 's SMS - SQL Injection

SmartStar Software1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-48376 · SmartStar Software CWS Web-Base

SmartStar Software CWS Web-Base - Arbitrary File Upload

EPSS 1.0%CVSS 9.8

xnx31 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-6886 · xnx3 wangmarket

xnx3 wangmarket Role Management Page code injection

Zabbix2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-32725 · Zabbix Zabbix

Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

EPSS 0.8%CVSS 9.6

CVE-2023-32728 · Zabbix Zabbix

Code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin