by Kastro CVE-2023-47253 · qualitor qalitor
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 512 of 785
qualitor
mitre
CVE-2023-46404 · mitre
PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.
CVE-2023-46817 · mitre
An issue was discovered in phpFox before 4.8.14.
CVE-2023-38965 · mitre
Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.
CVE-2023-46981 · mitre
SQL injection vulnerability in Novel-Plus v.4.2.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort par…
CVE-2023-36621 · mitre
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android.
CVE-2023-46980 · mitre
An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted…
CVE-2023-38406 · mitre
bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."
CVE-2023-43982 · mitre
Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url param…
CVE-2023-40922 · mitre
kerawen before v2.5.1 was discovered to contain a SQL injection vulnerability via the ocs_id_cart parameter at KerawenDeliveryModuleFront…
Projectworlds Pvt. Limited
CVE-2023-45341 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45325 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45334 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45336 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45338 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45340 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45342 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45343 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45344 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45345 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45346 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45347 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
QNAP Systems Inc.
CVE-2023-23368 · QNAP Systems Inc. QTS
QTS, QuTS hero, QuTScloud
CVE-2023-23369 · QNAP Systems Inc. Multimedia Console
QTS, Multimedia Console, and Media Streaming add-on
inspireui
CVE-2023-3277 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
Red Hat
CVE-2023-3961 · Red Hat Red Hat Enterprise Linux 8
Samba: smbd allows client access to unix domain sockets on the file system as root
CVE-2023-46846 · Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
Squid: request/response smuggling in http/1.1 and icap
Paytm
CVE-2022-45805 · Paytm Paytm Payment Gateway
WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection
Franklin Fueling System
relativity
Mitsubishi Electric Corporation
CVE-2023-4699 · Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ES
Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products
Chunghwa Telecom
CVE-2023-41350 · Chunghwa Telecom NOKIA G-040W-Q
Chunghwa Telecom NOKIA G-040W-Q - Excessive Authentication Attempts
CVE-2023-41351 · Chunghwa Telecom NOKIA G-040W-Q
Chunghwa Telecom NOKIA G-040W-Q - Broken Access Control
CVE-2023-41355 · Chunghwa Telecom NOKIA G-040W-Q
Chunghwa Telecom NOKIA G-040W-Q - Improper Input Validation
David F. Carr
CVE-2023-41652 · David F. Carr RSVPMaker
WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection
Themeum
Zendrop
CVE-2023-25960 · Zendrop Zendrop – Global Dropshipping
WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection
Chris Richardson
CVE-2023-26015 · Chris Richardson MapPress Maps for WordPress
WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection
Favethemes
CVE-2023-36529 · Favethemes Houzez - Real Estate WordPress Theme
WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection
Gopi Ramasamy
CVE-2022-46818 · Gopi Ramasamy Email posts to subscribers
WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection
Repute Infosystems
CVE-2022-46808 · Repute Infosystems ARMember
WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection
Rolf van Gelder
CVE-2023-32508 · Rolf van Gelder Order Your Posts Manually
WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection
Spiffy Plugins
CVE-2022-46859 · Spiffy Plugins Spiffy Calendar
WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
Tips and Tricks HQ, Peter Petreski
CVE-2022-47588 · Tips and Tricks HQ, Peter Petreski Simple Photo Gallery
WordPress Simple Photo Gallery Plugin <= v1.8.1 is vulnerable to SQL Injection
Web-X
CVE-2022-47445 · Web-X Be POPIA Compliant
WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection
weDevs
CVE-2023-34383 · weDevs WP Project Manager
WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection
WPN-XM
Neshan Maps Platform
CVE-2022-47426 · Neshan Maps Platform Neshan Maps