by Kastro CVE-2023-50089 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 501 of 784
mitre
CVE-2023-44709 · mitre
PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component pluto…
CVE-2023-31546 · mitre
Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.
CVE-2023-46456 · mitre
In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload…
CVE-2023-48084 · mitre
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
CVE-2023-48085 · mitre
Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.
CVE-2023-50469 · mitre
Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter…
CVE-2023-45894 · mitre
The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows…
CVE-2023-47261 · mitre
Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request c…
CVE-2023-49937 · mitre
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.
CVE-2023-48049 · mitre
A SQL injection vulnerability in Cybrosys Techno Solutions Website Blog Search (aka website_search_blog) v.
CVE-2023-40954 · mitre
A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v.
CVE-2023-46348 · mitre
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive informa…
CVE-2023-48050 · mitre
SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-at…
CVE-2023-49934 · mitre
An issue was discovered in SchedMD Slurm 23.11.x.
CVE-2023-47577 · mitre
An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current p…
CVE-2023-49363 · mitre
Rockoa <2.3.3 is vulnerable to SQL Injection.
CVE-2023-50073 · mitre
EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php.
CVE-2023-50563 · mitre
Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php.
CVE-2023-40921 · mitre
SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive…
CVE-2023-48925 · mitre
SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive i…
mlflow
dompdf
glpi-project
h2oai
SourceCodester
CVE-2023-6771 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection
CVE-2023-6765 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System email_setup.php prepare sql injection
Microsoft
CVE-2023-36019 · Microsoft Microsoft Power Platform
Microsoft Power Platform Connector Spoofing Vulnerability
Dasan Networks
SAP_SE
CVE-2023-50422 · SAP_SE cloud-security-services-integration-library
Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)
CVE-2023-49583 · SAP_SE @sap/xssec
Escalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)
CVE-2023-50423 · SAP_SE sap-xssec
Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)
CVE-2023-50424 · SAP_SE github.com/sap/cloud-security-client-go
Escalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go)
CVE-2023-49581 · SAP_SE SAP NetWeaver Application Server ABAP and ABAP Platform
SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
Thecosy
joomlart.com
CVE-2023-49707 · joomlart.com S5 Register module for Joomla
Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0
Joomstar.com
CVE-2023-49708 · Joomstar.com Starshop component for Joomla
Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9
king-products.net
CVE-2023-40629 · king-products.net LMS Lite component for Joomla
Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1
PHOENIX CONTACT
CVE-2023-0757 · PHOENIX CONTACT MULTIPROG
Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource
CVE-2023-46141 · PHOENIX CONTACT Automation Worx Software Suite
Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
Repox
Devolutions
joomcode.com
CVE-2023-40630 · joomcode.com JCDashboards component for Joomla
Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30
silabs.com
CVE-2023-4489 · silabs.com Z/IP Gateway SDK