by Kastro CVE-2023-45852 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 519 of 785
mitre
CVE-2023-45856 · mitre
qdPM 9.2 allows remote code execution by using the Add Attachments feature of Edit Project to upload a .php file to the /uploads URI.
CVE-2023-40852 · mitre
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to o…
CVE-2023-41262 · mitre
An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1.
CVE-2023-45572 · mitre
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-40833 · mitre
An issue in Thecosy IceCMS v.1.0.0 allows a remote attacker to gain privileges via the Id and key parameters in getCosSetting.
CVE-2023-30154 · mitre
Multiple improper neutralization of SQL parameters in module AfterMail (aftermailpresta) for PrestaShop, before version 2.2.1, allows rem…
CVE-2023-43119 · mitre
An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers…
netis-systems
CVE-2023-45465 · netis-systems n3m
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS se…
CVE-2023-45466 · netis-systems n3m
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.
CVE-2023-45467 · netis-systems n3m
Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.
snyk
SourceCodester
CVE-2023-5589 · SourceCodester Judging Management System
SourceCodester Judging Management System login.php sql injection
CVE-2023-5587 · SourceCodester Free Hospital Management System for Small Practices
SourceCodester Free Hospital Management System for Small Practices Parameter doctors.php sql injection
CVE-2023-5580 · SourceCodester Library System
SourceCodester Library System index.php sql injection
xwiki-contrib
CVE-2023-45138 · xwiki-contrib application-changerequest
Change Request Application vulnerable to XSS and remote code execution through change request title
Rockwell Automation
CVE-2023-29464 · Rockwell Automation FactoryTalk Linx
Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
zlib
d-link
CVE-2023-45574 · d-link di-7003gv2.d1
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-45573 · d-link di-7003gv2.d1
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-45575 · d-link di-7003gv2.d1
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D…
CVE-2023-45576 · d-link di-7003gv2.d1
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-45577 · d-link di-7003gv2.d1
Stack Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D…
CVE-2023-45578 · d-link di-7003gv2.d1
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-45579 · d-link di-7003gv2.d1
Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.…
CVE-2023-44808 · d-link dir-820l
D-Link DIR-820L 1.05B03 has a stack overflow vulnerability in the sub_4507CC function.
CVE-2023-44809 · d-link dir-820l
D-Link device DIR-820L 1.05B03 is vulnerable to Insecure Permissions.
totolink
CVE-2023-36954 · totolink cp300\+
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36953 · totolink cp300\+_firmware
TOTOLINK CP300+ V5.2cu.7594_B20200910 and before is vulnerable to command injection.
CVE-2023-36947 · totolink x5000r_firmware
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File…
CVE-2023-36950 · totolink x5000r_firmware
TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http…
CVE-2023-36340 · totolink nr1800x_firmware
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.
CVE-2023-36952 · totolink cp300\+_firmware
TOTOLINK CP300+ V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the pingIp parameter in the function setDiagnosisCfg.
CVE-2023-36955 · totolink cp300\+_firmware
TOTOLINK CP300+ <=V5.2cu.7594_B20200910 was discovered to contain a stack overflow via the File parameter in the function UploadCustomMod…
SoftEther VPN
zephyrproject-rtos
CVE-2023-4257 · zephyrproject-rtos Zephyr
Unchecked user input length in the Zephyr WiFi shell module
MainWP
CVE-2023-23737 · MainWP MainWP Broken Links Checker Extension
WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection
Mitsubishi Electric Corporation
CVE-2023-4562 · Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MT/ES
Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module
Zabbix
CVE-2023-29453 · Zabbix Zabbix
Agent 2 package are built with Go version affected by CVE-2023-24538
CVE-2023-32722 · Zabbix Zabbix
Stack-buffer Overflow in library module zbxjson
CVE-2023-32723 · Zabbix Zabbix
Inefficient permission check in class CControllerAuthenticationUpdate
CVE-2023-32724 · Zabbix Zabbix
JavaScript engine memory pointers are directly available for Zabbix users for modification
Biltay Technology
CVE-2023-5045 · Biltay Technology Kayisi
SQLi in Biltay's Kayısı
CVE-2023-5046 · Biltay Technology Procost
SQLi in Biltay's Procost
IBM
CVE-2022-32755 · IBM Security Directory Server
IBM Security Directory Server external entity injection
babel
LINE Corporation
CVE-2023-5554 · LINE Corporation LINE client for iOS