by Kastro CVE-2023-4873 · Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 528 of 785
Byzoro
mitre
CVE-2023-31067 · mitre
An issue was discovered in TSplus Remote Access through 16.0.2.14.
CVE-2023-31068 · mitre
An issue was discovered in TSplus Remote Access through 16.0.2.14.
CVE-2023-37759 · mitre
Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to r…
CVE-2023-31069 · mitre
An issue was discovered in TSplus Remote Access through 16.0.2.14.
CVE-2023-42471 · mitre
The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted in…
CVE-2023-42470 · mitre
The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an e…
CVE-2020-19559 · mitre
An issue in Diebold Aglis XFS for Opteva v.4.1.61.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Resol…
CVE-2023-40834 · mitre
OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthen…
CVE-2023-30058 · mitre
novel-plus 3.6.2 is vulnerable to SQL Injection.
CVE-2023-40945 · mitre
Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php.
CVE-2023-42268 · mitre
Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show.
CVE-2023-42276 · mitre
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
CVE-2023-42277 · mitre
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
CVE-2023-40944 · mitre
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php.
CVE-2023-40946 · mitre
Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php.
CVE-2023-36140 · mitre
In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user ac…
CVE-2023-39073 · mitre
An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.
CVE-2023-39069 · mitre
An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory auth…
CVE-2023-41615 · mitre
Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username an…
CVE-2023-39150 · mitre
ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code exe…
argoproj
d-link
CVE-2020-19319 · d-link 202l
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the FILECODE parameter on login.
CVE-2020-19320 · d-link dir-619l
Buffer overflow vulnerability in DLINK 619L version B 2.06beta via the curTime parameter on login.
CVE-2023-39637 · d-link dir-816_a2
D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis.
mintplex-labs
CVE-2023-4897 · mintplex-labs mintplex-labs/anything-llm
Relative Path Traversal in mintplex-labs/anything-llm
SourceCodester
CVE-2023-4848 · SourceCodester Simple Book Catalog App
SourceCodester Simple Book Catalog App delete_book.php sql injection
CVE-2023-4871 · SourceCodester Contact Manager App
SourceCodester Contact Manager App delete.php sql injection
CVE-2023-4872 · SourceCodester Contact Manager App
SourceCodester Contact Manager App add.php sql injection
CVE-2023-4845 · SourceCodester Simple Membership System
SourceCodester Simple Membership System account_edit_query.php sql injection
CVE-2023-4866 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System booking.php exec sql injection
IBOS
Go toolchain
Hewlett Packard Enterprise (HPE)
CVE-2023-30908 · Hewlett Packard Enterprise (HPE) HPE OneView
A remote authentication bypass issue exists in a OneView API.
arris
mofinetwork
Softneta
CVE-2023-40150 · Softneta MedDream PACS
Softneta MedDream PACS Exposed Dangerous Method or Function
Resort Data Processing, Inc.
CVE-2023-39424 · Resort Data Processing, Inc. IRM Next Generation
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in RDPngFileUpload.dll
CVE-2023-39420 · Resort Data Processing, Inc. IRM Next Generation
Use of Hard-coded Credentials in RDPCore.dll
CVE-2023-39422 · Resort Data Processing, Inc. IRM Next Generation
Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints
CVE-2023-39423 · Resort Data Processing, Inc. IRM Next Generation
Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll
SAP_SE
CVE-2023-40309 · SAP_SE SAP CommonCryptoLib
Missing Authorization check in SAP CommonCryptoLib
CVE-2023-40622 · SAP_SE SAP BusinessObjects Business Intelligence Platform (Promotion Management)
Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)
dedecms
Dover Fueling Solutions
CVE-2023-41256 · Dover Fueling Solutions MAGLINK LX Web Console Configuration