by Kastro CVE-2022-48565 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 532 of 785
mitre
CVE-2023-36281 · mitre
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via a JSON file to load_prompt.
CVE-2023-39834 · mitre
PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via create_function.
CVE-2023-39699 · mitre
IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/in…
CVE-2021-33388 · mitre
dpic 2021.04.10 has a Heap Buffer Overflow in themakevar() function in dpic.y
CVE-2021-33390 · mitre
dpic 2021.04.10 has a use-after-free in thedeletestringbox() function in dpic.y.
CVE-2023-39560 · mitre
ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
CVE-2022-36648 · mitre
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attacke…
CVE-2022-45611 · mitre
An issue was discovered in Fresenius Kabi PharmaHelp 5.1.759.0 allows attackers to gain escalated privileges via via capture of user logi…
Siemens
CVE-2022-48522 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege esca…
CVE-2021-32292 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726.
CVE-2022-48174 · Siemens RUGGEDCOM RST2428P
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.
xwiki
CVE-2023-40177 · xwiki xwiki-platform
XWiki Platform privilege escalation (PR) from account through AWM content fields
CVE-2023-40573 · xwiki xwiki-platform
XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
CVE-2023-40176 · xwiki xwiki-platform
SXSS in the user profile via the timezone displayer
CVE-2023-40572 · xwiki xwiki-platform
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
tenda
CVE-2023-40799 · tenda ac23
Tenda AC23 Vv16.03.07.45_cn is vulnerable to Buffer Overflow via sub_450A4C function.
CVE-2023-40904 · tenda ac10v4_firmware
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceLi…
CVE-2023-40896 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.
CVE-2023-40901 · tenda ac10
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceLi…
CVE-2023-40902 · tenda ac10v4
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMac…
CVE-2023-40893 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.
CVE-2023-40895 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.
CVE-2023-40899 · tenda ac8
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList…
CVE-2023-40900 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList.
CVE-2023-40891 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.
CVE-2023-40892 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /go…
CVE-2023-40894 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.
CVE-2023-40897 · tenda ac8v4
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.
CVE-2023-40898 · tenda ac8
Tenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.
SPA-Cart
CVE-2023-4548 · SPA-Cart eCommerce CMS
SPA-Cart eCommerce CMS GET Parameter search sql injection
dream0x01
CVE-2023-40571 · dream0x01 weblogic-framework
weblogic-framework Deserialization of Untrusted Data vulnerability
Danfoss
e-Excellence
CVE-2023-32757 · e-Excellence U-Office Force
e-Excellence U-Office Force - Arbitrary File Upload
IBOS
SICK AG
smub
CVE-2023-4404 · smub Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More
Donation Forms by Charitable <= 1.7.0.12 - Unauthenticated Privilege Escalation
yealink
Devolutions
IBM
CVE-2023-38734 · IBM Robotic Process Automation
IBM Robotic Process Automation privilege escalation
OPTO 22
SourceCodester
CVE-2023-4556 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System sexit.php mysqli_query sql injection
CVE-2023-4558 · SourceCodester Inventory Management System
SourceCodester Inventory Management System staff_data.php sql injection
CVE-2023-4557 · SourceCodester Inventory Management System
SourceCodester Inventory Management System search_purchase_paymen_report.php sql injection
Juplink
Silicon Labs
CVE-2023-4041 · Silicon Labs Gecko Bootloader