by Kastro CVE-2023-6345 · Google Chrome
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 506 of 785
CVE-2022-42536 · Google Android
Remote code execution
CVE-2022-42537 · Google Android
Remote code execution
CVE-2022-42541 · Google Android
Remote code execution
CVE-2022-42538 · Google Android
Elevation of privilege
CVE-2022-42540 · Google Android
Elevation of privilege
anyscale
mitre
CVE-2023-48023 · mitre
Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF.
CVE-2023-48802 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48812 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The St…
CVE-2023-46886 · mitre
Dreamer CMS before version 4.0.1 is vulnerable to Directory Traversal.
CVE-2023-48193 · mitre
Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the comma…
CVE-2023-23325 · mitre
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain a command injection vulnerability via the NetHostname parameter.
CVE-2023-47418 · mitre
Remote Code Execution (RCE) vulnerability in o2oa version 8.1.2 and before, allows attackers to create a new interface in the service man…
CVE-2023-47462 · mitre
Insecure Permissions vulnerability in GL.iNet AX1800 v.3.215 and before allows a remote attacker to execute arbitrary code via the file s…
CVE-2023-47503 · mitre
An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component…
CVE-2023-48803 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48804 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48805 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48806 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48807 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48808 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48810 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-48811 · mitre
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The S…
CVE-2023-49313 · mitre
A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity.
CVE-2023-45479 · mitre
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the list parameter in the function sub_49…
CVE-2023-45480 · mitre
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the src parameter in the function sub_47D…
CVE-2023-45482 · mitre
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the urls parameter in the function get_pa…
CVE-2023-45483 · mitre
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the time parameter in the function compar…
CVE-2023-45484 · mitre
Tenda AC10 version US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the shareSpeed parameter in the function…
CVE-2023-23324 · mitre
Zumtobel Netlink CCD Onboard 3.74 - Firmware 3.80 was discovered to contain hardcoded credentials for the Administrator account.
tenda
azukaar
Arcserve
CVE-2023-41998 · Arcserve Arcserve UDP
Arcserve UDP Unauthenticated RCE
CVE-2023-41999 · Arcserve Arcserve UDP
Arcserve UDP Management Authentication Bypass
CVE-2023-42000 · Arcserve Arcserve UDP
Arcserve UDP Agent Unauthenticated Path Traversal File Upload
Chamilo
CVE-2023-3368 · Chamilo Chamilo
Chamilo LMS Unauthenticated Command Injection
CVE-2023-3533 · Chamilo Chamilo
Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write
CVE-2023-3545 · Chamilo Chamilo
Chamilo LMS Htaccess File Upload Security Bypass
Control iD
CVE-2023-6329 · Control iD iDSecure
Control iD iDSecure passwordCustom Authentication Bypass
Unknown
CVE-2023-4922 · Unknown wpb-show-core
WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
CVE-2023-5559 · Unknown 10Web Booster
10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion
gl-inet
NEC Platforms, Ltd
NETGEAR
CVE-2023-49693 · NETGEAR NETGEAR ProSAFE Network Management System
NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
netwrix
oroinc
Jenkins Project
CVE-2023-49654 · Jenkins Project Jenkins MATLAB Plugin
Missing permission checks in Jenkins MATLAB Plugin 2.11.0 and earlier allow attackers to have Jenkins parse an XML file from the Jenkins…
CVE-2023-49656 · Jenkins Project Jenkins MATLAB Plugin