by Kastro CVE-2023-20198 · Cisco Cisco IOS XE Software
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 518 of 785
Cisco
Advantech
curl
d-link
Unknown
CVE-2023-4666 · Unknown Form Maker by 10Web
Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload
mitre
CVE-2023-41630 · mitre
eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component.
CVE-2022-42150 · mitre
TinyLab linux-lab v1.1-rc1 and cloud-labv0.8-rc2, v1.1-rc1 are vulnerable to insecure permissions.
CVE-2023-27132 · mitre
TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web…
CVE-2023-27133 · mitre
TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\w…
CVE-2023-45952 · mitre
An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code vi…
CVE-2023-45386 · mitre
In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::sea…
CVE-2023-45951 · mitre
lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php.
CVE-2023-46005 · mitre
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_branch.php.
CVE-2023-46006 · mitre
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_user.php.
CVE-2023-46007 · mitre
Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /edit_staff.php.
CVE-2023-45580 · mitre
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2022-47583 · mitre
Terminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.
CVE-2023-45278 · mitre
Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via c…
CVE-2023-30131 · mitre
An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other…
CVE-2023-45376 · mitre
In the module "Carousels Pack - Instagram, Products, Brands, Supplier" (hicarouselspack) for PrestaShop up to version 1.5.0 from HiPresta…
CVE-2022-37830 · mitre
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
CVE-2023-43986 · mitre
DM Concept configurator before v4.9.4 was discovered to contain a SQL injection vulnerability via the component ConfiguratorAttachment::g…
xwikisas
Ivanti
web2py
FreshTomato
CVE-2023-3991 · FreshTomato FreshTomato
OS command injection vulnerability in FreshTomato 2023.3
Liferay
CVE-2023-42627 · Liferay DXP
Multiple stored cross-site scripting (XSS) vulnerabilities in the Commerce module in Liferay Portal 7.3.5 through 7.4.3.91, and Liferay D…
CVE-2023-42628 · Liferay DXP
Stored cross-site scripting (XSS) vulnerability in the Wiki widget in Liferay Portal 7.1.0 through 7.4.3.87, and Liferay DXP 7.0 fix pack…
CVE-2023-42629 · Liferay DXP
Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87, and Liferay DXP 7…
CVE-2023-42497 · Liferay DXP
Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Lif…
CVE-2023-44311 · Liferay DXP
Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect clas…
CVE-2023-44309 · Liferay DXP
Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Lifer…
CVE-2023-44310 · Liferay DXP
Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 t…
NodeJS
Apache Software Foundation
CVE-2023-43668 · Apache Software Foundation Apache InLong
Apache InLong: Jdbc Connection Security Bypass in InLong
South River Technologies
CVE-2023-45685 · South River Technologies Titan MFT
Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers
Axis Communications AB
CVE-2023-21413 · Axis Communications AB AXIS OS
Remote code execution vulnerability during the installation of ACAP applications on the Axis device
EasyUse Digital Technology
CVE-2023-34207 · EasyUse Digital Technology MailHunter Ultimate
Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate
wipotec
Oracle Corporation
CVE-2023-22069 · Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2023-22072 · Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
CVE-2023-22089 · Oracle Corporation WebLogic Server
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).
totolink
NI
CVE-2023-4601 · NI System Configuration
Stack-based Buffer Overflow in NI System Configuration Software
IBM
CVE-2023-33836 · IBM Security Verify Governance
IBM Security Verify Governance information disclosure
HCL Software
CVE-2023-37502 · HCL Software HCL Compass