by Kastro CVE-2023-49103 · ownCloud ownCloud graphapi
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 508 of 785
ownCloud
mitre
CVE-2023-43177 · mitre
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
CVE-2023-38823 · mitre
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary cod…
CVE-2023-41101 · mitre
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
CVE-2023-46990 · mitre
Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to…
CVE-2023-38316 · mitre
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
CVE-2023-48028 · mitre
kodbox 1.46.01 has a security flaw that enables user enumeration.
CVE-2023-38880 · mitre
The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database backup functionality.
CVE-2023-48176 · mitre
An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jwt (JSON web token).
CVE-2023-48655 · mitre
An issue was discovered in MISP before 2.4.176.
CVE-2023-48656 · mitre
An issue was discovered in MISP before 2.4.176.
CVE-2023-48657 · mitre
An issue was discovered in MISP before 2.4.176.
CVE-2023-48658 · mitre
An issue was discovered in MISP before 2.4.176.
CVE-2023-48659 · mitre
An issue was discovered in MISP before 2.4.176.
CVE-2023-45387 · mitre
In the module "Product Catalog (CSV, Excel, XML) Export PRO" (exportproducts) in versions up to 5.0.0 from MyPrestaModules for PrestaShop…
h2oai
CVE-2023-6038 · h2oai h2oai/h2o-3
Local File Inclusion in h2oai/h2o-3
CVE-2023-6016 · h2oai h2oai/h2o-3
H2O Remote Code Execution via POJO Model Import
CVE-2023-6013 · h2oai h2oai/h2o-3
H2O Local File Include
opensupports
mlflow
CVE-2023-6014 · mlflow mlflow/mlflow
MLflow Authentication Bypass
CVE-2023-6018 · mlflow mlflow/mlflow
MLflow Arbitrary File Write
CVE-2023-6015 · mlflow mlflow/mlflow
MLflow Arbitrary File Upload
redislabs
Unknown
CVE-2023-5340 · Unknown Five Star Restaurant Menu and Food Ordering
Five Star Restaurant Menu and Food Ordering < 2.4.11 - Unauthenticated PHP Object Injection
CVE-2023-5652 · Unknown WP Hotel Booking
WP Hotel Booking < 2.0.8 - Unauthenticated SQLi
CVE-2023-5640 · Unknown Article analytics
Article Analytics <= 1.0 - Unauthenticated SQL injection
code-projects
NC3-LU
Adobe
CVE-2023-44350 · Adobe ColdFusion
ColdFusion | Deserialization of Untrusted Data (CWE-502)
CVE-2023-44351 · Adobe ColdFusion
Adobe ColdFusion RCE Security Vulnerability
CVE-2023-44353 · Adobe ColdFusion
ColdFusion WDDX Deserialization Gadgets
CVE-2023-44324 · Adobe Adobe Framemaker Publishing Server
ZDI-CAN-21344: Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability
ray-project
CVE-2023-6019 · ray-project ray-project/ray
Ray Command Injection in cpu_profile Parameter
xwiki-contrib
CVE-2023-48292 · xwiki-contrib application-admintools
XWiki Admin Tools Application Run Shell Command allows CSRF RCE attacks
INEA
Apache Software Foundation
CVE-2023-46302 · Apache Software Foundation Apache Submarine
Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization
CVE-2022-46337 · Apache Software Foundation Apache Derby
Apache Derby: LDAP injection vulnerability in authenticator
Red Lion Controls
CVE-2023-40151 · Red Lion Controls ST-IPm-8460
Red Lion Controls Sixnet RTU Exposed Dangerous Method Or Function
CVE-2023-42770 · Red Lion Controls ST-IPm-8460
Red Lion Controls Sixnet RTU Authentication Bypass Using An Alternative Path Or Channel
concretecms
First Co., Ltd.
CVE-2023-47213 · First Co., Ltd. CFR-904E, CFR-908E, CFR-916E
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configurat…
CVE-2023-47674 · First Co., Ltd. CFR-904E, CFR-908E, CFR-916E
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrit…
LuxSoft
scottopolis
CVE-2023-4214 · scottopolis AppPresser – Mobile App Framework