by Kastro CVE-2023-6309 · moses-smt mosesdecoder
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 507 of 785
moses-smt
Unknown
owncast_project
mitre
CVE-2023-49046 · mitre
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in th…
CVE-2023-49043 · mitre
Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto paramete…
CVE-2023-49210 · mitre
The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, an…
CVE-2023-46575 · mitre
A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information a…
CVE-2023-48188 · mitre
SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a craf…
CVE-2023-49042 · mitre
Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter…
CVE-2023-49044 · mitre
Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the f…
CVE-2023-46349 · mitre
In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perf…
CVE-2023-49208 · mitre
scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn regi…
CVE-2023-49214 · mitre
Usedesk before 1.7.57 allows chat template injection.
CVE-2023-45377 · mitre
In the module "Chronopost Official" (chronopost) for PrestaShop, a guest can perform SQL injection.
CVE-2023-46357 · mitre
In the module "Cross Selling in Modal Cart" (motivationsale) < 3.5.0 from MyPrestaModules for PrestaShop, a guest can perform SQL injection.
CVE-2023-49312 · mitre
Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is…
tenda
Apache Software Foundation
CVE-2023-37924 · Apache Software Foundation Apache Submarine
Apache Submarine: SQL injection from unauthorized login
infornweb
CVE-2023-5815 · infornweb Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
Wordfence
Byzoro
glenwpcoder
CVE-2023-5822 · glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
Digital Communications Technologies
CVE-2023-6248 · Digital Communications Technologies Syrus4 IoT Telematics Gateway
Data leakage and arbitrary remote code execution in Syrus cloud devices
Autodesk
CVE-2023-29073 · Autodesk AutoCAD, Advance Steel and Civil 3D
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow.
CVE-2023-29074 · Autodesk AutoCAD, Advance Steel and Civil 3D
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.
CVE-2023-29075 · Autodesk AutoCAD, Advance Steel and Civil 3D
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.
CVE-2023-29076 · Autodesk AutoCAD, Advance Steel and Civil 3D
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption…
WAGO
CVE-2023-4149 · WAGO Industrial Managed Switch (0852-0602)
WAGO: OS Command Injection Vulnerability in Managed Switch
Hikvision
Medart Health Services
CVE-2023-3631 · Medart Health Services Medart Notification Panel
SQLi in Medart Notification Panel
nextcloud
CVE-2023-48306 · nextcloud security-advisories
Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF
CVE-2023-48307 · nextcloud security-advisories
Nextcloud Mail app vulnerable to Server-Side Request Forgery
SourceCodester
CVE-2023-6305 · SourceCodester Free and Open Source Inventory Management System
SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection
CVE-2023-6306 · SourceCodester Free and Open Source Inventory Management System
SourceCodester Free and Open Source Inventory Management System member_data.php sql injection
Veribilim Software Computer
CVE-2023-3377 · Veribilim Software Computer Veribase
SQLi in Veribilim's Veribase
zephyrproject-rtos
CVE-2023-5055 · zephyrproject-rtos Zephyr
L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
Mozilla
Veon Computer
CVE-2023-2889 · Veon Computer Service Tracking Software
SQLi in Veon Computer's Service Tracking Software
Pandora FMS
CVE-2023-41790 · Pandora FMS Pandora FMS
Traversal Path on PHP file
CVE-2023-41807 · Pandora FMS Pandora FMS
Linux Local Privilege Escalation Via GoTTY Page
CVE-2023-4677 · Pandora FMS Pandora FMS
Unauthenticated Admin Account Takeover Via Cron Log File Backups
projectcapsule
CVE-2023-48312 · projectcapsule capsule-proxy