by Kastro CVE-2023-50164 · Apache Software Foundation Apache Struts
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,188 matching vulnerabilities · Page 502 of 784
Apache Software Foundation
Totolink
mitre
CVE-2023-43364 · mitre
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.
CVE-2023-49437 · mitre
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControl…
CVE-2023-49999 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.
CVE-2023-46932 · mitre
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause…
CVE-2023-49417 · mitre
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.
CVE-2023-46454 · mitre
In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in th…
CVE-2023-49007 · mitre
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
CVE-2023-47254 · mitre
An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system comma…
CVE-2023-49435 · mitre
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49436 · mitre
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlL…
CVE-2023-46498 · mitre
An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code…
CVE-2023-43742 · mitre
An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161…
CVE-2023-49433 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-49434 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-50000 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.
CVE-2023-50001 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.
CVE-2023-50002 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.
CVE-2023-41117 · mitre
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x…
CVE-2023-48929 · mitre
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation.
CVE-2023-49418 · mitre
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
CVE-2023-49443 · mitre
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords.
CVE-2023-36649 · mitre
Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to…
CVE-2023-50429 · mitre
IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.
SENEC
SourceCodester
CVE-2023-6658 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System sql injection
CVE-2023-6617 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System attendance.php sql injection
CVE-2023-6619 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System class_form.php sql injection
CVE-2023-6657 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System student_form.php sql injection
Hongjing
Microsoft
CVE-2023-35618 · Microsoft Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Kashipara Group
CVE-2023-4122 · Kashipara Group Student Information System
Student Information System v1.0 - Insecure File Upload
CVE-2023-5008 · Kashipara Group Student Information System
Student Information System v1.0 - Unauthenticated SQL Injection
Be Devious Web Development
CVE-2023-35039 · Be Devious Web Development Password Reset with Code for WordPress REST API
WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication
PHPGurukul
CVE-2023-6648 · PHPGurukul Nipah Virus Testing Management System
PHPGurukul Nipah Virus Testing Management System password-recovery.php sql injection
code-projects
CVE-2023-6651 · code-projects Matrimonial Site
code-projects Matrimonial Site sql injection
CVE-2023-6652 · code-projects Matrimonial Site
code-projects Matrimonial Site register.php register sql injection
rogierlankhorst
CVE-2023-5761 · rogierlankhorst Burst Statistics – Privacy-Friendly Analytics for WordPress
The Burst Statistics – Privacy-Friendly Analytics for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'url' paramet…
Red Hat
CVE-2023-6394 · Red Hat Red Hat build of Quarkus 2.13.9
Quarkus: graphql operations over websockets bypass
CVE-2023-48423 · Google Android
In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check.
CVE-2023-48425 · Google Android
U-Boot vulnerability resulting in persistent Code Execution
CVE-2023-6181 · Google Android
An oversight in BCB handling of reboot reason that allows for persistent code execution
CVE-2023-48417 · Google Android
Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
CVE-2023-48424 · Google Android