The archive.

KnpLabs1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2023-41330 · KnpLabs snappy

Unsafe deserialization in knplabs/knp-snappy

china_mobile_communications1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-41012 · china_mobile_communications china_mobile_intelligent_home_gateway

An issue in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary co…

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-39681 · mitre

Cuppa CMS v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the email_outgoing parameter at /Configuration.php.

CVE-2023-41009 · mitre

File Upload vulnerability in adlered bolo-solo v.2.6 allows a remote attacker to execute arbitrary code via a crafted script to the autho…

CVE-2023-41508 · mitre

A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel.

EPSS 1%public exploit CVSS 9.8

CVE-2023-41507 · mitre

Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products,…

EPSS 1.0%public exploit CVSS 9.8

CVE-2023-36361 · mitre

Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-39654 · mitre

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search_to_symbol_dict.

EPSS 0.9%public exploit CVSS 9.8

CVE-2023-41910 · mitre

An issue was discovered in lldpd before 1.0.17.

EPSS 1%CVSS 9.8

tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-4744 · Tenda AC8

Tenda AC8 formSetDeviceName stack-based overflow

CVE-2023-40942 · tenda ac9v3.0br

Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg.

EPSS 0.8%public exploit CVSS 9.8

wiremock1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2023-39967 · wiremock wiremock

Full read and controlled SSRF through URL parameter when testing a request inside wiremock-studio

EPSS 1%public exploit CVSS 10.0

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-4749 · SourceCodester Inventory Management System

SourceCodester Inventory Management System index.php file inclusion

EPSS 1.0%public exploit CVSS 9.8

Ahwxorg1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2023-41054 · Ahwxorg LibreY

LibreY Server-Side Request Forgery (SSRF) vulnerability in image_proxy.php

EPSS 0.9%public exploit CVSS 9.1

Cacti1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-39361 · Cacti cacti

Unauthenticated SQL Injection in graph_view.php in Cacti

EPSS 89%CVSS 9.8

dglingren1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-4634 · dglingren Media Library Assistant

Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution

EPSS 86%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-40743 · Apache Software Foundation Apache Axis

Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService

Open Automation Software1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-31242 · Open Automation Software OAS Platform

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v18.00.0072.

LG Electronics2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-4613 · LG Electronics LG-LED Assistant

Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

CVE-2023-4614 · LG Electronics LG-LED Assistant

setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

Apple1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-40397 · Apple macOS

The issue was addressed with improved checks.

BeyondTrust1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-4310 · BeyondTrust Privileged Remote Access (PRA)

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability w…

SearchBlox1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2020-10131 · SearchBlox SearchBlox

CVE-2020-10131

Adobe1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2021-36023 · Adobe Adobe Commerce

Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution

EPSS 2%CVSS 9.1

Thinkingreed Inc.1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-41149 · Thinkingreed Inc. F-RevoCRM

F-RevoCRM version7.3.7 and version7.3.8 contains an OS command injection vulnerability.

EPSS 1%CVSS 9.8

Moxa1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-39979 · Moxa MXsecurity Series

MXsecurity Authentication Bypass

EPSS 1.0%CVSS 9.8

Neutron1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-4178 · Neutron Neutron Smart VMS

Authentication Bypass in Neutron Smart VMS

EPSS 0.8%CVSS 9.8

Software AG1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-0925 · Software AG webMethods OneData

Software AG webMethods OneData Deserialization Vulnerability

EPSS 0.8%CVSS 9.8

ARDEREG1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-4485 · ARDEREG Sistemas SCADA

ARDEREG Sistemas SCADA SQL Injection

BMA1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-35068 · BMA Personnel Tracking System

SQLi in BMAs Personnel Tracking System

Coyav Travel1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-35072 · Coyav Travel Proagent

SQLi in Coyav Travels Proagent

electron1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-23623 · electron electron

Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled in Electron

IBM1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2023-35892 · IBM Financial Transaction Manager for SWIFT Services

IBM Financial Transaction Manager for SWIFT Services XML external entity injection

EPSS 1%CVSS 9.1

Mava Software1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-3616 · Mava Software Hotel Management System

SQLi in Mava Softwares Hotel Management System

Mestav Software1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-4531 · Mestav Software E-commerce Software

SQLi in Mestavs E-commerce Software

Osoft1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-35065 · Osoft Paint Production Management

SQLi in Osofts Paint Production Management

Proscend Advice1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2023-3703 · Proscend Advice ICR Series routers FW

Proscend Advice ICR Series routers fw version 1.76

EPSS 0.6%CVSS 10.0

Unisign1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-3374 · Unisign Bookreen

Privilege Escalation in Bookreen

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-4747 · VulDB

DedeCMS tags.php sql injection

Digita Information Technology1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-4034 · Digita Information Technology Smartrise Document Management System

SQLi in Smartrise Document Management System