by Kastro CVE-2023-6360 · tenable
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 505 of 785
tenable
Zyxel
CVE-2023-4473 · Zyxel NAS326 firmware
A command injection vulnerability in the web server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.…
CVE-2023-4474 · Zyxel NAS326 firmware
The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmw…
CVE-2023-35138 · Zyxel NAS326 firmware
A command injection vulnerability in the “show_zysync_server_contents” function of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and…
HtmlUnit
cxong
mitre
CVE-2023-48801 · mitre
In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them…
CVE-2023-43454 · mitre
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the…
CVE-2023-48886 · mitre
A deserialization vulnerability in NettyRpc v1.2 allows attackers to execute arbitrary commands via sending a crafted RPC request.
CVE-2023-48842 · mitre
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.
CVE-2023-49371 · mitre
RuoYi up to v4.6 was discovered to contain a SQL injection vulnerability via /system/dept/edit.
CVE-2023-48800 · mitre
In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them…
CVE-2023-48887 · mitre
A deserialization vulnerability in Jupiter v1.3.1 allows attackers to execute arbitrary commands via sending a crafted RPC request.
CVE-2023-43453 · mitre
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the…
CVE-2023-43455 · mitre
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the…
CVE-2023-48799 · mitre
TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.
CVE-2023-48910 · mitre
Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download.
CVE-2023-48967 · mitre
Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data.
CVE-2023-49946 · mitre
In Forgejo before 1.20.5-1, certain endpoints do not check whether an object belongs to a repository for which permissions are being chec…
Delta Electronics
CVE-2023-47207 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
CVE-2023-39226 · Delta Electronics InfraSuite Device Master
Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function
ArslanSoft
CVE-2023-5636 · ArslanSoft Education Portal
Malicious File Upload in ArslanSoft's Education Portal
CVE-2023-5634 · ArslanSoft Education Portal
SQLi in ArslanSoft's Education Portal
Apache Software Foundation
CVE-2023-49733 · Apache Software Foundation Apache Cocoon
Apache Cocoon's StreamGenerator is vulnerable to XXE injection
CVE-2022-45135 · Apache Software Foundation Apache Cocoon
Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction
Dell
CVE-2023-44302 · Dell Dell PowerProtect Data Manager DM5500 Appliance
Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability.
CVE-2023-44305 · Dell Dell PowerProtect Data Manager DM5500 Appliance
Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance.
Tyler Technologies
CVE-2023-6342 · Tyler Technologies Court Case Management Plus
Tyler Technologies Court Case Management Plus "pay for print" allows authentication bypass
CVE-2023-6353 · Tyler Technologies Civil and Criminal Electronic Filing
Tyler Technologies Civil and Criminal Electronic Filing Upload.aspx allows authentication bypass
CVE-2023-6354 · Tyler Technologies Magistrate Court Case Management Plus
Tyler Technologies Magistrate Court Case Management Plus PDFViewer.aspx allows authentication bypass
connectize
CVE-2023-24049 · connectize ac21000_g6_firmware
An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor cred…
CVE-2023-24051 · connectize ac21000_g6_firmware
A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute…
CVE-2023-24052 · connectize ac21000_g6_firmware
An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functi…
Schweitzer Engineering Laboratories
CVE-2023-31176 · Schweitzer Engineering Laboratories SEL-451
Insufficient entropy vulnerability could lead to authentication bypass
CVE-2023-34388 · Schweitzer Engineering Laboratories SEL-451
Improper authentication could lead to session hijacking
PHPMemcachedAdmin
CVE-2023-6026 · PHPMemcachedAdmin PHPMemcachedAdmin
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in PHPMemcachedAdmin
SourceCodester
CVE-2023-6464 · SourceCodester User Registration and Login System
SourceCodester User Registration and Login System add-user.php sql injection
Voovi Social Networking Script
CVE-2023-6410 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6411 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6412 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6413 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6414 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6415 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6416 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6417 · Voovi Social Networking Script Voovi Social Networking Script
SQL injection in Voovi Social Networking Script
CVE-2023-6418 · Voovi Social Networking Script Voovi Social Networking Script