The archive.

CVE-2023-47800 · mitre

Natus NeuroWorks and SleepWorks before 8.4 GMA3 utilize a default password of xltek for the Microsoft SQL Server service sa account, allo…

HumanSignal1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-43791 · HumanSignal label-studio

Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens

EPSS 2%public exploit CVSS 9.8

xwiki3 vulnerabilities on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2023-46243 · xwiki xwiki-platform

Code execution via the edit action in XWiki platform

EPSS 1%public exploit CVSS 10.0

CVE-2023-46244 · xwiki xwiki-platform

Privilege escalation in Xwiki platform

EPSS 1.0%CVSS 9.1

CVE-2023-46242 · xwiki xwiki-platform

Code injection in XWiki Platform

EPSS 0.5%CVSS 9.7

Squidex1 vulnerability on this pageMax CVSS 9.1Priority 53KEV 0

CVE-2023-46253 · Squidex squidex

Remote code execution in Squidex

EPSS 2%public exploit CVSS 9.1

Tongda3 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-6052 · Tongda OA 2017

Tongda OA 2017 delete.php sql injection

EPSS 1%public exploit CVSS 9.8

CVE-2023-6053 · Tongda OA 2017

Tongda OA 2017 delete.php sql injection

CVE-2023-6054 · Tongda OA 2017

Tongda OA 2017 lock.php sql injection

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-47248 · Apache Software Foundation PyArrow

PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

EPSS 13%CVSS 9.8

Zavio5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-3959 · Zavio IP Camera CF7500

Zavio IP Camera Stack-Based Buffer Overflow

EPSS 49%CVSS 9.8

CVE-2023-4249 · Zavio IP Camera CF7500

Zavio IP Camera Stack-Based Buffer Overflow

EPSS 13%CVSS 9.8

CVE-2023-39435 · Zavio IP Camera CF7500

Zavio IP Camera Stack-Based Buffer Overflow

CVE-2023-43755 · Zavio IP Camera CF7500

Zavio IP Camera Stack-Based Buffer Overflow

CVE-2023-45225 · Zavio IP Camera CF7500

Zavio IP Camera Stack-Based Buffer Overflow

Telit Cinterion1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-47610 · Telit Cinterion EHS5

A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists in Telit Cinterion EHS5/6/8 that could allow a remote unauthen…

moodle1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-5550 · moodle moodle

Moodle: rce due to lfi risk in some misconfigured shared hosting environments

Apereo Foundation1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-4612 · Apereo Foundation CAS

MFA bypass in Apereo CAS

FreeBSD1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-5941 · FreeBSD FreeBSD

libc stdio buffer overflow

Helix1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-45849 · Helix Helix Core

Arbitrary Code Execution in Helix Core

froxlor1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2023-6069 · froxlor froxlor/froxlor

Improper Link Resolution Before File Access in froxlor/froxlor

EPSS 1%CVSS 9.9

Lanaccess1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-6012 · Lanaccess ONSAFE MonitorHM

Incorrect input data validation in Lanaccess ONSAFE MonitorHM Web Console

Projectworlds Pvt. Limited8 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-46677 · Projectworlds Pvt. Limited Online Job Portal

Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46679 · Projectworlds Pvt. Limited Online Job Portal

Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46785 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46787 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46788 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46789 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46793 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-46800 · Projectworlds Pvt. Limited Online Matrimonial Project

Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Noptin Newsletter1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-46803 · Noptin Newsletter Simple Newsletter Plugin – Noptin

WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection

Paul Ryley1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-46801 · Paul Ryley Site Reviews

WordPress Site Reviews Plugin <= 6.2.0 is vulnerable to CSV Injection

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-6074 · PHPGurukul Restaurant Table Booking System

PHPGurukul Restaurant Table Booking System Booking Reservation check-status.php sql injection

EPSS 0.8%CVSS 9.8

WebToffee2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-45370 · WebToffee WordPress Comments Import & Export

WordPress WordPress Comments Import & Export Plugin <= 2.3.1 is vulnerable to CSV Injection

CVE-2022-46802 · WebToffee Product Reviews Import Export for WooCommerce

WordPress Product Reviews Import Export for WooCommerce Plugin <= 1.4.8 is vulnerable to CSV Injection

WPDeveloper1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-46809 · WPDeveloper ReviewX – Multi-criteria Rating & Reviews for WooCommerce

WordPress ReviewX Plugin <= 1.6.7 is vulnerable to CSV Injection

EPSS 0.8%CVSS 9.8

Icegram1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-45810 · Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress & WooCommerce

WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

Muneeb1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-23796 · Muneeb Form Builder | Create Responsive Contact Forms

WordPress Form Builder Plugin <= 1.9.9.0 is vulnerable to CSV Injection

opentext1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-5913 · opentext Fortify ScanCentral DAST

A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.

EPSS 0.7%CVSS 9.8

Scott Reilly1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-45360 · Scott Reilly Commenter Emails

WordPress Commenter Emails Plugin <= 2.6.1 is vulnerable to CSV Injection

getsentry1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2023-46729 · getsentry sentry-javascript

Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint

EPSS 0.7%CVSS 9.3

Puppet1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-5309 · Puppet Puppet Enterprise

Broken Session Management in Puppet Enterprise