by Kastro CVE-2023-50164 · Apache Software Foundation Apache Struts
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 503 of 785
Apache Software Foundation
Totolink
mitre
CVE-2023-49437 · mitre
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControl…
CVE-2023-49999 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setUmountUSBPartition.
CVE-2023-46932 · mitre
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause…
CVE-2023-49404 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formAdvancedSetListSet.
CVE-2023-49007 · mitre
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
CVE-2023-47254 · mitre
An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system comma…
CVE-2023-49403 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a command injection vulnerability via the function setFixTools.
CVE-2023-49431 · mitre
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49435 · mitre
Tenda AX9 V22.03.01.46 is vulnerable to command injection.
CVE-2023-49436 · mitre
Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlL…
CVE-2023-46498 · mitre
An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code…
CVE-2023-48860 · mitre
TOTOLINK N300RT version 3.2.4-B20180730.0906 has a post-authentication RCE due to incorrect access control, allows attackers can bypass f…
CVE-2023-49406 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-49409 · mitre
Tenda AX3 V16.03.12.11 was discovered to contain a Command Execution vulnerability via the function /goform/telnet.
CVE-2023-48823 · mitre
A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payloa…
CVE-2023-43742 · mitre
An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161…
CVE-2023-49402 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function localMsg.
CVE-2023-49405 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function UploadCfg.
CVE-2023-49408 · mitre
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the function set_device_name.
CVE-2023-49410 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.
CVE-2023-49411 · mitre
Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.
CVE-2023-49425 · mitre
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .
CVE-2023-49426 · mitre
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.
CVE-2023-49430 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.
CVE-2023-49432 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'deviceList' parameter at /goform/setMacFilterCfg.
CVE-2023-49433 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.
CVE-2023-49434 · mitre
Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.
CVE-2023-50000 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formResetMeshNode.
CVE-2023-50001 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formUpgradeMeshOnline.
CVE-2023-50002 · mitre
Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function formRebootMeshNode.
CVE-2023-48929 · mitre
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation.
CVE-2023-49443 · mitre
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords.
CVE-2023-50429 · mitre
IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.
tenda
CVE-2023-49428 · tenda ax12_firmware
Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.
CVE-2023-49424 · tenda ax12_firmware
Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.
CVE-2023-49429 · tenda ax9_firmware
Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' p…
SENEC
Microsoft
CVE-2023-35618 · Microsoft Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Kashipara Group
CVE-2023-4122 · Kashipara Group Student Information System
Student Information System v1.0 - Insecure File Upload
CVE-2023-5008 · Kashipara Group Student Information System
Student Information System v1.0 - Unauthenticated SQL Injection
Be Devious Web Development
CVE-2023-35039 · Be Devious Web Development Password Reset with Code for WordPress REST API
WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication
SourceCodester
CVE-2023-6617 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System attendance.php sql injection
CVE-2023-6619 · SourceCodester Simple Student Attendance System
SourceCodester Simple Student Attendance System class_form.php sql injection
rogierlankhorst
CVE-2023-5761 · rogierlankhorst Burst Statistics – Privacy-Friendly Analytics for WordPress