by Kastro CVE-2023-35082 · Ivanti EPMM
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 534 of 785
Ivanti
Juniper Networks
mitre
CVE-2023-26469 · mitre
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.
CVE-2023-39115 · mitre
install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document.
CVE-2020-26037 · mitre
Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to…
CVE-2023-38894 · mitre
A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend func…
CVE-2023-38896 · mitre
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and…
CVE-2023-39659 · mitre
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the Py…
CVE-2023-39661 · mitre
An issue in pandas-ai v.0.9.1 and before allows a remote attacker to execute arbitrary code via the _is_jailbreak function.
CVE-2023-39662 · mitre
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEng…
CVE-2023-38889 · mitre
An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of llu…
CVE-2023-39846 · mitre
An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token.
CVE-2023-39850 · mitre
Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFun…
CVE-2023-39851 · mitre
webchess v1.0 was discovered to contain a SQL injection vulnerability via the $playerID parameter at mainmenu.php.
CVE-2023-38915 · mitre
File Upload vulnerability in Wolf-leo EasyAdmin8 v.1.0 allows a remote attacker to execute arbtirary code via the upload type function.
CVE-2023-33663 · mitre
In the module “Customization fields fee for your store” (aicustomfee) from ai-dev module for PrestaShop, an attacker can perform SQL inje…
comfast
CVE-2023-38865 · comfast cf-xr11
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_4143F0.
CVE-2023-38866 · comfast cf-xr11
COMFAST CF-XR11 V2.7.2 has a command injection vulnerability detected at function sub_415588.
CVE-2023-38863 · comfast cf-xr11
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the ifname and mac parameters in the sub_410074 func…
CVE-2023-38864 · comfast cf-xr11
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the protal_delete_picname parameter in the sub_41171…
xwiki
doctor_appointment_system_project
CVE-2023-39852 · doctor_appointment_system_project doctor_appointment_system
Doctormms v1.0 was discovered to contain a SQL injection vulnerability via the $userid parameter at myAppoinment.php.
Netflix
Rockwell Automation
CVE-2023-2917 · Rockwell Automation ThinManager ThinServer
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
CVE-2023-2915 · Rockwell Automation ThinManager ThinServer
Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
d-link
CVE-2023-39665 · d-link dir-868l
D-Link DIR-868L fw_revA_1-12_eu_multi_20170316 was discovered to contain a buffer overflow via the acStack_50 parameter.
CVE-2023-39666 · d-link dir-842
D-Link DIR-842 fw_revA_1-02_eu_multi_20151008 was discovered to contain multiple buffer overflows in the fgets function via the acStack_1…
Moxa
CVE-2023-33239 · Moxa TN-5900 Series
Second Order Command-injection Vulnerability in the Key-generation Function
CVE-2023-33238 · Moxa TN-5900 Series
Command-injection Vulnerability in Certificate Management
CVE-2023-34213 · Moxa TN-5900 Series
Second Order Command-injection Vulnerability in the Key-generation Function
CVE-2023-34215 · Moxa TN-5900 Series
Second Order Command-injection Vulnerability in the Certificate-generation Function
CVE-2023-34214 · Moxa TN-5900 Series
Second Order Command-injection Vulnerability in the Certificate-generation Function
CVE-2023-4204 · Moxa NPort IAW5000A-I/O Series
NPort IAW5000A-I/O Series Hardcoded Credential Vulnerability
Datasolution
CVE-2023-39970 · Datasolution AcyMailing component for Joomla
Extension - acymailing.com - RCE in AcyMailing component for Joomla 6.7.0-8.5.0
Dell
Broadcom
CVE-2023-4323 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
CVE-2023-4324 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
CVE-2023-4325 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
CVE-2023-4329 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
CVE-2023-4336 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
CVE-2023-4337 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
CVE-2023-4338 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
CVE-2023-4340 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
CVE-2023-4341 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
CVE-2023-4342 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy
CVE-2023-4344 · Broadcom LSI Storage Authority (LSA)
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
Cisco
CVE-2023-20013 · Cisco Cisco Intersight Virtual Appliance
Multiple vulnerabilities in Cisco Intersight Private Virtual Appliance could allow an authenticated, remote attacker to execute arbitrary…
CVE-2023-20017 · Cisco Cisco Intersight Virtual Appliance