by Kastro CVE-2023-34048 · VMware VMware vCenter Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 515 of 785
VMware
xwiki
CVE-2023-45136 · xwiki xwiki-platform
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
CVE-2023-37909 · xwiki xwiki-platform
Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet
CVE-2023-37912 · xwiki xwiki-rendering
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
CVE-2023-37913 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
CVE-2023-45134 · xwiki xwiki-platform
XWiki Platform XSS vulnerability from account in the create page form via template provider
CVE-2023-45135 · xwiki xwiki-platform
XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
CVE-2023-37908 · xwiki xwiki-rendering
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
CVE-2023-45137 · xwiki xwiki-platform
XWiki Platform XSS with edit right in the create document form for existing pages
mitre
Hewlett Packard Enterprise (HPE)
CVE-2023-30912 · Hewlett Packard Enterprise (HPE) HPE OneView
A remote code execution issue exists in HPE OneView.
IDAttend Pty Ltd
CVE-2023-26568 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26569 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26572 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-27254 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-27255 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-27262 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26581 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26582 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26583 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26584 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-27260 · IDAttend Pty Ltd IDWeb
Unauthenticated SQL Injection In IDAttend’s IDWeb Application
CVE-2023-26573 · IDAttend Pty Ltd IDWeb
Missing Authentication In IDAttend’s IDWeb Application
Ping Identity
CVE-2023-37283 · Ping Identity PingFederate
Authentication Bypass via HTML Form & Identifier First Adapter
totolink
CVE-2023-46550 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
CVE-2023-46551 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.
CVE-2023-46552 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.
CVE-2023-46553 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.
CVE-2023-46554 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.
CVE-2023-46555 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.
CVE-2023-46556 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.
CVE-2023-46557 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.
CVE-2023-46558 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
CVE-2023-46559 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr.
CVE-2023-46560 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.
CVE-2023-46562 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.
CVE-2023-46563 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS.
CVE-2023-46564 · totolink x2000r_firmware
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.
EisBaer Scada
CVE-2023-42489 · EisBaer Scada v3.0.6433.1964
EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
CVE-2023-42491 · EisBaer Scada EisBaer Scada
EisBaer Scada - CWE-285: Improper Authorization
CVE-2023-42494 · EisBaer Scada v3.0.6433.1964
EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
CVE-2023-42492 · EisBaer Scada v3.0.6433.1964
EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
CVE-2023-42493 · EisBaer Scada v3.0.6433.1964
EisBaer Scada - CWE-256: Plaintext Storage of a Password
man-group
Ubiquiti
CVE-2023-41721 · Ubiquiti UniFi Network Application
Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176.
Palantir
CVE-2023-30967 · Palantir com.palantir.meta:orbital-simulator
Gotham Orbital Simulator path traversal
brix
IBM
CVE-2023-46158 · IBM WebSphere Application Server Liberty