by Kastro CVE-2023-22518 · Atlassian Confluence Data Center
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 513 of 785
Atlassian
totolink
CVE-2023-46977 · totolink lr1200gb_firmware
TOTOLINK LR1200GB V9.1.0u.6619_B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth.
CVE-2023-46976 · totolink a3300r_firmware
TOTOLINK A3300R 17.0.0cu.557_B20221024 contains a command injection via the file_name parameter in the UploadFirmwareFile function.
CVE-2023-46979 · totolink x6000r_firmware
TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLed…
CVE-2023-46993 · totolink a3300r_firmware
In TOTOLINK A3300R V17.0.0cu.557_B20221024 when dealing with setLedCfg request, there is no verification for the enable parameter, which…
CVE-2023-46484 · totolink x6000r_firmware
An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function.
CVE-2023-46485 · totolink x6000r_firmware
An issue in TOTOlink X6000R V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function o…
Bitrix24
CVE-2023-1719 · Bitrix24 Bitrix24
Bitrix24 Insecure Global Variable Extraction
CVE-2023-1717 · Bitrix24 Bitrix24
Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
CVE-2023-1720 · Bitrix24 Bitrix24
Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload
CVE-2023-1716 · Bitrix24 Bitrix24
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)
CVE-2023-1715 · Bitrix24 Bitrix24
Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)
mitre
CVE-2023-42299 · mitre
Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of ser…
CVE-2023-31579 · mitre
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token.
CVE-2023-46356 · mitre
In the module "CSV Feeds PRO" (csvfeeds) before 2.6.1 from Bl Modules for PrestaShop, a guest can perform SQL injection.
CVE-2023-46482 · mitre
SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality…
CVE-2023-46958 · mitre
An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.
CVE-2023-43139 · mitre
An issue in franfinance before v.2.0.27 allows a remote attacker to execute arbitrary code via the validation.php, and controllers/front/…
CVE-2023-44025 · mitre
SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted…
CVE-2023-47204 · mitre
Unsafe YAML deserialization in yaml.Loader in transmute-core before 1.13.5 allows attackers to execute arbitrary Python code.
CVE-2023-27846 · mitre
SQL injection vulnerability found in PrestaShop themevolty v.4.0.8 and before allow a remote attacker to gain privileges via the tvcmsblo…
CVE-2023-36263 · mitre
Prestashop opartlimitquantity 1.4.5 and before is vulnerable to SQL Injection.
CVE-2023-45378 · mitre
In the module "PrestaBlog" (prestablog) version 4.4.7 and before from HDclic for PrestaShop, a guest can perform SQL injection.
Projectworlds Pvt. Limited
CVE-2023-45012 · Projectworlds Pvt. Limited Online Bus Booking System
Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45015 · Projectworlds Pvt. Limited Online Bus Booking System
Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45018 · Projectworlds Pvt. Limited Online Bus Booking System
Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45019 · Projectworlds Pvt. Limited Online Bus Booking System
Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45111 · Projectworlds Pvt. Limited Online Examination System
Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-45323 · Projectworlds Pvt. Limited Online Food Ordering System
Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
SourceCodester
CVE-2023-5918 · SourceCodester Visitor Management System
SourceCodester Visitor Management System manage_user.php sql injection
CloudExplorer-Dev
CVE-2023-44397 · CloudExplorer-Dev CloudExplorer-Lite
CloudExplorer Lite permission bypass vulnerability
PX4
thorsten
CVE-2023-5865 · thorsten thorsten/phpmyfaq
Insufficient Session Expiration in thorsten/phpmyfaq
Cisco
CVE-2023-20048 · Cisco Cisco Firepower Management Center
A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote at…
Unknown
CVE-2023-5360 · Unknown Royal Elementor Addons and Templates
Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload
GamiPress
Progress Software Corporation
CVE-2023-40050 · Progress Software Corporation Chef Automate
Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
thorntech
turing
goauthentik
sourcegraph
BestWebSoft
CVE-2023-36508 · BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress
WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
Contact Form - WPManageNinja LLC
CVE-2023-24410 · Contact Form - WPManageNinja LLC Contact Form Plugin – Fastest Contact Form Builder Plugin for WordPress by Fluent Forms
WordPress FluentForm Plugin <= 4.3.25 is vulnerable to SQL Injection
CRM Perks
CVE-2023-31212 · CRM Perks Database for Contact Form 7, WPforms, Elementor forms
WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection
Devolutions
CVE-2023-5765 · Devolutions Remote Desktop Manager
Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an…
CVE-2023-5766 · Devolutions Remote Desktop Manager
A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute c…
Solwin Infotech
CVE-2023-37966 · Solwin Infotech User Activity Log
WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection
Themeisle
CVE-2023-33927 · Themeisle Multiple Page Generator Plugin – MPG
WordPress Multiple Page Generator Plugin – MPG Plugin <= 3.3.19 is vulnerable to SQL Injection
WooCommerce
CVE-2023-35879 · WooCommerce Product Vendors