by Kastro CVE-2023-41887 · OpenRefine OpenRefine
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 527 of 785
OpenRefine
Academy
china_mobile_communications
CVE-2023-41011 · china_mobile_communications china_mobile_intelligent_home_gateway
Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker…
mitre
CVE-2023-38912 · mitre
SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted paylo…
CVE-2023-37755 · mitre
i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warn…
CVE-2023-37756 · mitre
I-doit pro 25 and below and I-doit open 25 and below employ weak password requirements for Administrator account creation.
CVE-2023-42405 · mitre
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskServ…
CVE-2023-39639 · mitre
LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs.
CVE-2023-39641 · mitre
Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliate…
CVE-2023-39642 · mitre
Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontCo…
CVE-2023-39643 · mitre
Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds().
CVE-2023-39612 · mitre
A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Admin…
CVE-2023-28614 · mitre
Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page.
CVE-2023-42398 · mitre
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in…
CVE-2023-36659 · mitre
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996.
CVE-2023-36657 · mitre
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996.
strapi
Adobe
Rockwell Automation
CVE-2023-2071 · Rockwell Automation Fa
FactoryTalk View Machine Edition Vulnerable to Remote Code Execution
d-link
Microsoft
CVE-2023-29332 · Microsoft Azure Kubernetes Service
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2023-36735 · Microsoft Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-36758 · Microsoft Microsoft Visual Studio 2022 version 17.7
Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36765 · Microsoft Microsoft Office 2019
Microsoft Office Elevation of Privilege Vulnerability
Hewlett Packard Enterprise (HPE)
CVE-2023-30909 · Hewlett Packard Enterprise (HPE) HPE OneView
A remote authentication bypass issue exists in some OneView APIs.
Saphira
CVE-2023-4662 · Saphira Saphira Connect
RCE in Saphira Connect
CVE-2023-4661 · Saphira Saphira Connect
SQLi in Saphira Connect
Red Hat
Besttem
CVE-2023-4833 · Besttem Network Marketing Software
SQLi in Besttem's Network Marketing Software
OpenText
CVE-2023-4501 · OpenText Visual COBOL, COBOL Server, Enterprise Developer, Enterprise Server
Authentication bypass in OpenText (Micro Focus) Enterprise Server
Yepas
CVE-2023-4702 · Yepas Digital Yepas
Authentication Bypass in Digital Yepas
CVE-2023-4972 · Yepas Digital Yepas
Information Disclosure in Digital Yepas
Cevik Informatics
CVE-2023-4231 · Cevik Informatics Online Payment System
SQLi in Cevik Informatics' Online Payment System
librenms
CVE-2023-4982 · librenms librenms/librenms
Cross-site Scripting (XSS) - Stored in librenms/librenms
CVE-2023-4978 · librenms librenms/librenms