by Kastro CVE-2023-43187 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 524 of 785
mitre
CVE-2023-43291 · mitre
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php…
CVE-2023-41449 · mitre
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-43216 · mitre
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php.
CVE-2023-43457 · mitre
An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/ad…
CVE-2023-44169 · mitre
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.
CVE-2023-44171 · mitre
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.
CVE-2023-44172 · mitre
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.
CVE-2023-43154 · mitre
In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt resu…
CVE-2023-43222 · mitre
SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file.
CVE-2021-38243 · mitre
xunruicms up to v4.5.1 was discovered to contain a remote code execution (RCE) vulnerability in /index.php.
CVE-2023-41419 · mitre
An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
CVE-2023-44170 · mitre
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php.
CVE-2023-43234 · mitre
DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the…
Unknown
CVE-2023-4521 · Unknown Import XML and RSS Feeds
Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
CVE-2023-4490 · Unknown WP Job Portal
WP Job Portal < 2.0.6 - Unauthenticated SQLi
Accusoft
CVE-2023-35002 · Accusoft ImageGear
A heap-based buffer overflow vulnerability exists in the pictwread functionality of Accusoft ImageGear 20.1.
CVE-2023-39453 · Accusoft ImageGear
A use-after-free vulnerability exists in the tif_parse_sub_IFD functionality of Accusoft ImageGear 20.1.
CVE-2023-32653 · Accusoft ImageGear
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1.
CVE-2023-40163 · Accusoft ImageGear
An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1.
CVE-2023-32284 · Accusoft ImageGear
An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1.
CVE-2023-32614 · Accusoft ImageGear
A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1.
tenda
CVE-2023-44013 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSe…
CVE-2023-44014 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg f…
CVE-2023-44016 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the ad…
CVE-2023-44015 · tenda ac10u_firmware
Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in th…
maxiguvenlik
CVE-2023-43131 · maxiguvenlik general_device_manager
General Device Manager 2.5.2.2 is vulnerable to Buffer Overflow.
glpi-project
CVE-2023-41320 · glpi-project glpi
Account takeover via SQL Injection in UI layout preferences in GLPI
CVE-2023-42461 · glpi-project glpi
SQL injection in ITIL actors in GLPI
CVE-2023-42462 · glpi-project glpi
File deletion through document upload process in GLPI
Illumio
Apple
CVE-2023-40400 · Apple iOS and iPadOS
This issue was addressed with improved checks.
CVE-2023-38586 · Apple macOS
An access issue was addressed with additional sandbox restrictions.
CVE-2023-40455 · Apple macOS
A permissions issue was addressed with additional restrictions.
CVE-2023-40436 · Apple macOS
The issue was addressed with improved bounds checks.
zephyrproject-rtos
CVE-2023-4260 · zephyrproject-rtos Zephyr
Potential off-by-one buffer overflow vulnerability in the Zephyr FS subsystem
CVE-2023-4264 · zephyrproject-rtos Zephyr
Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
Docker Inc.
CVE-2023-0625 · Docker Inc. Docker Desktop
Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
CVE-2023-0626 · Docker Inc. Docker Desktop
Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
SagerNet
SiberianCMS
CVE-2023-39375 · SiberianCMS SiberianCMS
SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
totolink
Huawei
CVE-2022-48605 · Huawei HarmonyOS
Input verification vulnerability in the fingerprint module.
CVE-2023-41294 · Huawei HarmonyOS
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.
CVE-2023-41297 · Huawei HarmonyOS
Vulnerability of defects introduced in the design process in the HiviewTunner module.
CVE-2023-39407 · Huawei HarmonyOS
The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.
CVE-2023-41296 · Huawei HarmonyOS