by Kastro CVE-2023-42793 · JetBrains TeamCity
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 526 of 785
JetBrains
mitre
CVE-2023-33831 · mitre
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary comman…
CVE-2023-43373 · mitre
Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.…
CVE-2023-43374 · mitre
Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldruid/personalizza.php.
CVE-2023-36109 · mitre
Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append…
CVE-2023-38888 · mitre
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and e…
CVE-2023-43371 · mitre
Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php.
CVE-2021-26837 · mitre
SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attacker…
CVE-2023-34575 · mitre
SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSave…
CVE-2023-39675 · mitre
SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php.
CVE-2023-42359 · mitre
SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the…
CVE-2023-42464 · mitre
A Type Confusion vulnerability was found in the Spotlight RPC functions in afpd in Netatalk 3.1.x before 3.1.17.
CVE-2023-40619 · mitre
phpPgAdmin 7.14.4 and earlier is vulnerable to deserialization of untrusted data which may lead to remote code execution because user-con…
CVE-2022-28357 · mitre
NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management ac…
CVE-2023-42322 · mitre
Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information.
CVE-2023-43375 · mitre
Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid/clienti.php via the annonascita, annosc…
netis-systems
CVE-2023-42336 · netis-systems wf2409e
An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via t…
CVE-2023-43134 · netis-systems 360rac1200
There is an unauthorized access vulnerability in Netis 360RAC1200 v1.3.4517, which allows attackers to obtain sensitive information of th…
tenda
snyk
patreon
dlink
CVE-2023-43202 · dlink dwl-6610ap_firmware
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function pcap_download_handler.
CVE-2023-43204 · dlink dwl-6610ap_firmware
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function sub_2EF50.
CVE-2023-43206 · dlink dwl-6610ap_firmware
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function web_cert_download_handler.
CVE-2023-43207 · dlink dwl-6610ap_firmware
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a command injection vulnerability in the function config_upload_handler.
CVE-2023-43203 · dlink dwl-6610ap_firmware
D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users.
Uniview
CVE-2023-0773 · Uniview Uniview IP Camera IPC322LB-SF28-A
Unauthorized Access Control Vulnerability in Uniview IP Camera
d-link
CVE-2023-43196 · d-link di-7200gv2.e1
D-Link DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the zn_jb parameter in the arp_sys.asp function.
CVE-2023-43197 · d-link di-7200gv2.e1
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the fn parameter in the tgfile.asp function.
CVE-2023-43198 · d-link di-7200gv2.e1
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/hi_block.asp funct…
CVE-2023-43199 · d-link di-7200gv2.e1
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/login.cgi function.
CVE-2023-43200 · d-link di-7200gv2.e1
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the id parameter in the yyxz.data function.
CVE-2023-43201 · d-link di-7200gv2.e1
D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_ext.asp function.
hit-reach
CVE-2023-4994 · hit-reach Allow PHP in Posts and Pages
Allow PHP in Posts and Pages <= 3.0.4 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
tp-link
VulDB
lovasoa
Ormazabal
Socomec
CVE-2023-41084 · Socomec MODULYS GP (MOD3GP-SY-120K)
Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking
Juplink
Sakshi2610
CVE-2023-5014 · Sakshi2610 Food Ordering Website
Sakshi2610 Food Ordering Website categoryfood.php sql injection
SourceCodester
CVE-2023-5034 · SourceCodester My Food Recipe
SourceCodester My Food Recipe Image Upload index.php unrestricted upload
CVE-2023-5018 · SourceCodester Lost and Found Information System