The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,219 matching vulnerabilities · Page 522 of 785

mitre19 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-44974 · mitre

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code…

EPSS 20%public exploit CVSS 9.8

CVE-2023-36619 · mitre

Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users.

EPSS 4%public exploit CVSS 9.8

CVE-2023-33270 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 3%public exploit CVSS 9.8

CVE-2023-33272 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 3%public exploit CVSS 9.8

CVE-2023-33273 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 3%public exploit CVSS 9.8

CVE-2023-33269 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 2%public exploit CVSS 9.8

CVE-2023-33271 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 2%public exploit CVSS 9.8

CVE-2023-44008 · mitre

File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the File Manager function.

EPSS 2%public exploit CVSS 9.8

CVE-2023-44009 · mitre

File Upload vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the Skin Management function.

EPSS 2%public exploit CVSS 9.8

CVE-2023-44011 · mitre

An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file a…

EPSS 2%public exploit CVSS 9.8

CVE-2023-33268 · mitre

An issue was discovered in DTS Monitoring 3.57.0.

EPSS 1%public exploit CVSS 9.8

CVE-2023-44973 · mitre

An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary cod…

EPSS 1%CVSS 9.8

CVE-2023-39646 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop.

EPSS 0.6%CVSS 9.8

CVE-2023-39647 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop.

EPSS 0.6%CVSS 9.8

CVE-2023-39648 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop.

EPSS 0.6%CVSS 9.8

CVE-2023-39649 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop.

EPSS 0.6%CVSS 9.8

CVE-2023-39651 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tv…

EPSS 0.6%CVSS 9.8

CVE-2023-43980 · mitre

Presto Changeo testsitecreator up to v1.1.1 was discovered to contain a SQL injection vulnerability via the component disable_json.php.

EPSS 0.6%CVSS 9.8

CVE-2023-39645 · mitre

Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop.

EPSS 0.6%CVSS 9.8

netis-systems3 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2023-43891 · netis-systems n3m_firmware

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability in the Changing Username and Password function.

EPSS 2%public exploit CVSS 9.8

CVE-2023-43892 · netis-systems n3m_firmware

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.

EPSS 2%public exploit CVSS 9.8

CVE-2023-43893 · netis-systems n3m_firmware

Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL)…

EPSS 2%public exploit CVSS 9.8

salesagility1 vulnerability on this pageMax CVSS 9.1Priority 54KEV 0

CVE-2023-5350 · salesagility salesagility/suitecrm

SQL Injection in salesagility/suitecrm

EPSS 2%public exploit CVSS 9.1

SourceCodester7 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-5277 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal student_avatar.php unrestricted upload

EPSS 1.0%public exploit CVSS 9.8

CVE-2023-5276 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal downloadable_student.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-5278 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal login.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-5279 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal my_classmates.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-5281 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal remove_inbox_message.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-5282 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal seed_message_student.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-5280 · SourceCodester Engineers Online Portal

SourceCodester Engineers Online Portal my_students.php sql injection

EPSS 0.8%CVSS 9.8

thorsten3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-5227 · thorsten thorsten/phpmyfaq

Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq

EPSS 0.6%public exploit CVSS 9.8

CVE-2023-5320 · thorsten thorsten/phpmyfaq

Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

EPSS 0.6%public exploit CVSS 9.0

CVE-2023-5316 · thorsten thorsten/phpmyfaq

Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

EPSS 0.5%public exploit CVSS 9.1

brazenlygeek1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2023-5201 · brazenlygeek OpenHook

OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode

EPSS 2%CVSS 9.9

extremenetworks1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-35803 · extremenetworks iq_engine

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

EPSS 2%CVSS 9.8

Riello UPS1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2022-47893 · Riello UPS Netman-204

NetMan 204 Remote Code Execution

EPSS 1%CVSS 10.0

PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-3656 · PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.

Unauthenticated Remote Code Execution

EPSS 1%CVSS 9.8

CVE-2023-3654 · PoS/ Dienstleistung, Entwicklung & Vertrieb GmbH cashIT! - serving solutions.

Origin Check Bypass

EPSS 0.4%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-37404 · IBM Observability with Instana

IBM Observability with Instana code execution

EPSS 0.8%CVSS 9.8

tenda1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-40830 · tenda ac6_firmware

Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.

EPSS 0.8%CVSS 9.8

MediaTek, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-20819 · MediaTek, Inc. MT2731, MT6570, MT6580, MT6595, MT6732, MT6735, MT6737, MT6737M, MT6738, MT6739, MT6750, MT6750S, MT6752, MT6753, MT6755, MT6757, MT6758, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6775, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6795, MT6797, MT6799, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6873, MT6875, MT6875T, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6891, MT6893, MT6895, MT6895T, MT6896, MT6897, MT6983, MT6985, MT6989, MT8666, MT8666A, MT8667, MT8673, MT8675, MT8765, MT8766, MT8766Z, MT8768, MT8768A, MT8768B, MT8768T, MT8768Z, MT8781, MT8786, MT8788, MT8788T, MT8788X, MT8788Z, MT8791, MT8791T, MT8797, MT8798

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check.

EPSS 0.7%CVSS 9.8

Qualcomm, Inc.4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-24855 · Qualcomm, Inc. Snapdragon

Use of Out-of-range Pointer Offset in Modem

EPSS 0.5%CVSS 9.8

CVE-2023-33028 · Qualcomm, Inc. Snapdragon

Buffer Copy without Checking Size of Input in WLAN Firmware

EPSS 0.5%CVSS 9.8

CVE-2023-22385 · Qualcomm, Inc. Snapdragon

Buffer Over-read in Data Modem

EPSS 0.4%CVSS 9.8

CVE-2023-28540 · Qualcomm, Inc. Snapdragon

Improper Authentication in Data Modem

EPSS 0.4%CVSS 9.1

SLiMS1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2023-3744 · SLiMS SLiMS

Server-Side Request Forgery in SLiMS

EPSS 0.6%CVSS 9.9

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-5300 · VulDB

TTSPlanning sql injection

EPSS 0.6%CVSS 9.8

Free5Gc1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2023-4659 · Free5Gc Open5Gc

Cross-Site Request Forgery in Free5Gc

EPSS 0.4%CVSS 9.8

TIBCO Software Inc.1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2023-26218 · TIBCO Software Inc. TIBCO Nimbus

TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities

EPSS 0.6%CVSS 9.0

BuddyBoss1 vulnerability on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2023-32670 · BuddyBoss BuddyBoss

BuddyBoss XSS vulnerability

EPSS 0.4%CVSS 9.0