Critical vulnerability archive — page 511

xwiki2 vulnerabilities on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2023-46731 · xwiki xwiki-platform

Remote code execution through the section parameter in Administration as guest in XWiki Platform

EPSS 90%public exploit CVSS 10.0

CVE-2023-46732 · xwiki xwiki-platform

Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

EPSS 2%CVSS 9.7

mitre3 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-42283 · mitre

Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL qu…

EPSS 2%public exploit CVSS 9.8

CVE-2023-42284 · mitre

Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted S…

EPSS 2%public exploit CVSS 9.8

CVE-2023-47359 · mitre

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket()…

EPSS 1%public exploit CVSS 9.8

clickbar1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2023-45827 · clickbar dot-diver

Prototype Pollution vulnerability in @clickbar/dot-diver

EPSS 1%public exploit CVSS 9.8

boltwire1 vulnerability on this pageMax CVSS 9.1Priority 53KEV 0

CVE-2023-46501 · boltwire boltwire

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin p…

EPSS 2%public exploit CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-5601 · Unknown WooCommerce Ninja Forms Product Add-ons

WooCommerce Ninja Forms Product Add-ons < 1.7.1 - Unauthenticated Arbitrary File Upload

EPSS 1%public exploit CVSS 9.8

remoteclinic3 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-33478 · remoteclinic remote_clinic

RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php.

EPSS 0.9%public exploit CVSS 9.8

CVE-2023-33479 · remoteclinic remote_clinic

RemoteClinic version 2.0 contains a SQL injection vulnerability in the /staff/edit.php file.

EPSS 0.9%public exploit CVSS 9.8

CVE-2023-33481 · remoteclinic remote_clinic

RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php.

EPSS 0.9%CVSS 9.8

Aiyaz, maheshpatel1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-40609 · Aiyaz, maheshpatel Contact form 7 Custom validation

WordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection

EPSS 0.7%public exploit CVSS 9.8

Daniel Söderström / Sidney van de Stouwe1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-38382 · Daniel Söderström / Sidney van de Stouwe Subscribe to Category

WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection

EPSS 0.7%public exploit CVSS 9.8

KaizenCoders1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2022-46860 · KaizenCoders Short URL

WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection

EPSS 0.7%public exploit CVSS 9.8

Online ADA2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-45830 · Online ADA Accessibility Suite by Online ADA

WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2022-47420 · Online ADA Accessibility Suite by Online ADA

WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection

EPSS 0.5%CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2023-47455 · tenda ax1806_firmware

Tenda AX1806 V1.0.0.1 contains a heap overflow vulnerability in setSchedWifi function, in which the src and v12 are directly obtained fro…

EPSS 1.0%public exploit CVSS 9.1

CVE-2023-47456 · tenda ax1806_firmware

Tenda AX1806 V1.0.0.1 contains a stack overflow vulnerability in function sub_455D4, called by function fromSetWirelessRepeat.

EPSS 1.0%public exploit CVSS 9.1

Veeam2 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2023-38547 · Veeam One

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access…

EPSS 21%CVSS 9.9

CVE-2023-38548 · Veeam One

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash…

EPSS 12%CVSS 9.8

POSIMYTH1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-45657 · POSIMYTH Nexter

WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection

EPSS 2%CVSS 9.8

1E3 vulnerabilities on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2023-45161 · 1E Platform

1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution

EPSS 0.9%CVSS 9.9

CVE-2023-45163 · 1E Platform

1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution

EPSS 1.0%CVSS 9.9

CVE-2023-5964 · 1E Platform

1E-Exchange-DisplayMessage instruction allows for arbitrary code execution

EPSS 0.9%CVSS 9.9

Lenderd1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-45357 · Lenderd 1003 Mortgage Application

WordPress 1003 Mortgage Application Plugin <= 1.75 is vulnerable to CSV Injection

EPSS 0.9%CVSS 9.8

biztechc1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-28748 · biztechc Copy or Move Comments

WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Castos1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45001 · Castos Seriously Simple Stats

WordPress Seriously Simple Stats Plugin <= 1.5.0 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Creative Solutions1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-35911 · Creative Solutions Contact Form Generator : Creative form builder for WordPress

WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Felix Welberg1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-33924 · Felix Welberg SIS Handball

WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

GiveWP1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-22719 · GiveWP GiveWP

WordPress GiveWP Plugin <= 2.25.1 is vulnerable to CSV Injection

EPSS 0.6%CVSS 9.8

ilGhera1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-41685 · ilGhera Woocommerce Support System

WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

InspireUI1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45055 · InspireUI MStore API

WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Kemal YAZICI - PluginPress1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-47432 · Kemal YAZICI - PluginPress Shortcode IMDB

WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Page Visit Counter1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45074 · Page Visit Counter Advanced Page Visit Counter – Most Wanted Analytics Plugin for WordPress

WordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Pressference1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45046 · Pressference Pressference Exporter

WordPress Pressference Exporter Plugin <= 1.0.3 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Progress Software Corporation1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2023-42659 · Progress Software Corporation WS_FTP Server

WS_FTP Server Arbitrary File Upload

EPSS 1%CVSS 9.1

RedNao1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-40207 · RedNao Donations Made Easy – Smart Donations

WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Sajjad Hossain1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-27605 · Sajjad Hossain WP Reroute Email

WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Video Gallery by Total-Soft1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-45069 · Video Gallery by Total-Soft Video Gallery – Best WordPress YouTube Gallery Plugin

WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Weblizar2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-46849 · Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode

WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

CVE-2022-47430 · Weblizar The School Management – Education & Learning Management

WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Weintek1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-5777 · Weintek EasyBuilder Pro

Weintek EasyBuilder Pro Use of Hard-coded Credentials

EPSS 0.7%CVSS 9.8

WpDevArt1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-47428 · WpDevArt Booking calendar, Appointment Booking System

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

Qualcomm, Inc.4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-33045 · Qualcomm, Inc. Snapdragon

Buffer Copy Without Checking Size of Input in WLAN Firmware

EPSS 0.6%CVSS 9.8

CVE-2023-22388 · Qualcomm, Inc. Snapdragon

Use of Out-of-range Pointer Offset in Multi-mode Call Processor

EPSS 0.4%CVSS 9.8

CVE-2023-21671 · Qualcomm, Inc. Snapdragon

Improper Input Validation in Core

EPSS 0.2%CVSS 9.3

CVE-2023-28574 · Qualcomm, Inc. Snapdragon

Improper Input Validation in Core

EPSS 0.1%CVSS 9.0

Red Lion1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-5719 · Red Lion Crimson

Red Lion Crimson Improper Neutralization of Null Byte or NUL Character

EPSS 0.6%CVSS 9.8

Jason Crouse, VeronaLabs1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2022-45373 · Jason Crouse, VeronaLabs Slimstat Analytics

WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection

EPSS 0.5%CVSS 9.8

silbersaiten1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2023-45380 · silbersaiten order_duplicator

In the module "Order Duplicator " Clone and Delete Existing Order" (orderduplicate) in version <= 1.1.7 from Silbersaiten for PrestaShop,…

EPSS 0.7%CVSS 9.1

The archive.