by Kastro CVE-2023-40044 · Progress Software Corporation WS_FTP Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 523 of 785
Progress Software Corporation
CVE-2023-42657 · Progress Software Corporation WS_FTP Server
WS_FTP Server Directory Traversal
pytorch
tenda
CVE-2023-44018 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_…
CVE-2023-44017 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fr…
CVE-2023-44019 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetPare…
CVE-2023-44020 · tenda ac10u
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the fo…
CVE-2023-44021 · tenda ac10u
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function.
CVE-2023-44022 · tenda ac10u
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the f…
CVE-2023-44023 · tenda ac10u
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_f…
Viessmann
jumpserver
CVE-2023-43651 · jumpserver jumpserver
Remote code execution on the host system via MongoDB shell in jumpserver
CVE-2023-42818 · jumpserver jumpserver
SSH public key login without private key challenge if mfa is enabled in jumpserver
CVE-2023-43652 · jumpserver jumpserver
Non-MFA account takeover via using only SSH public key to login in jumpserver
d-link
hospital-management-system
CVE-2023-5004 · Hospital-management-system Hospital-management-system
Hospital-management-system-in-php 378c157 - Blind SQL Injection
CVE-2023-5053 · hospital-management-system hospital-management-system
SQL Injection in hospital-management-system-in-php 378c157 in index.php
Gym Management System Project
CVE-2023-5185 · Gym Management System Project Gym Management System Project
Gym Management System Project v1.0 - Insecure File Upload
mitre
CVE-2023-30415 · mitre
Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at…
CVE-2023-38870 · mitre
A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1.
CVE-2023-44080 · mitre
An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchLis…
CVE-2023-44273 · mitre
Consensys gnark-crypto through 0.11.2 allows Signature Malleability.
Online Book Store Project
CVE-2023-43739 · Online Book Store Project Online Book Store Project
Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
Online Movie Ticket Booking System
CVE-2023-44163 · Online Movie Ticket Booking System Online Movie Ticket Booking System
Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-44164 · Online Movie Ticket Booking System Online Movie Ticket Booking System
Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-44166 · Online Movie Ticket Booking System Online Movie Ticket Booking System
Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
Asset Management System
CVE-2023-43013 · Asset Management System Asset Management System
Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi)
Tongda
OpenRapid
hospital_management_system
CVE-2023-43909 · hospital_management_system hospital_management_system
Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in app…
Mozilla
CVE-2023-5176 · Mozilla Firefox
Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2.
CVE-2023-5168 · Mozilla Firefox
A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a po…
CVE-2023-5174 · Mozilla Firefox
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting…
CVE-2023-5172 · Mozilla Firefox
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free a…
CVE-2023-5175 · Mozilla Firefox
During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different co…
Cisco
CVE-2023-20252 · Cisco Cisco SD-WAN vManage
A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenti…
CVE-2023-20186 · Cisco IOS
A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could…
SICK AG
SourceCodester
CVE-2023-5260 · SourceCodester Simple Membership System
SourceCodester Simple Membership System group_validator.php sql injection
Acronis
CVE-2023-44206 · Acronis Acronis Cyber Protect 15
Sensitive information disclosure and manipulation due to improper authorization.
CVE-2023-44152 · Acronis Acronis Cyber Protect 15
Sensitive information disclosure and manipulation due to improper authentication.
MRV Tech
CVE-2023-35071 · MRV Tech Logging Administration Panel
SQLi in MRV Tech's Logging Administration Panel
Generex
Real Time Automation
CVE-2023-4523 · Real Time Automation 460 Series