The archive.

CVE-2023-30187 · mitre

An out of bounds memory access vulnerability in ONLYOFFICE DocumentServer 4.0.3 through 7.3.2 allows remote attackers to run arbitrary co…

CVE-2020-36034 · mitre

SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code,…

CVE-2023-38860 · mitre

An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.

CVE-2020-36082 · mitre

File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via cr…

CVE-2021-26505 · mitre

Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.…

CVE-2021-27523 · mitre

An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information…

CVE-2020-27514 · mitre

Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to…

EPSS 1%public exploit CVSS 9.1

CVE-2021-28411 · mitre

An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, all…

EPSS 1.0%public exploit CVSS 9.8

CVE-2023-29468 · mitre

The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XC…

EPSS 10%CVSS 9.8

CVE-2020-27544 · mitre

An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remot…

EPSS 1%CVSS 9.8

CVE-2023-40267 · mitre

GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.

EPSS 1%CVSS 9.8

CVE-2023-32748 · mitre

The Linux DVS server component of Mitel MiVoice Connect through 19.3 SP2 (22.24.1500.0) could allow an unauthenticated attacker with inte…

EPSS 0.9%CVSS 9.8

CVE-2023-40359 · mitre

xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e., neither alphanumeric nor…

EPSS 0.9%CVSS 9.8

CVE-2023-37847 · mitre

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability.

EPSS 0.7%CVSS 9.8

CVE-2023-40260 · mitre

EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username an…

EPSS 0.6%CVSS 9.1

CVE-2023-40256 · mitre

A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the…

EPSS 0.4%CVSS 9.8

wavlink1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-38861 · wavlink wl_wnj575a3

An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set…

comfast1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-38862 · comfast cf-xr11

An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in…

radareorg1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-4322 · radareorg radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

EPSS 0.9%public exploit CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-3435 · Unknown User Activity Log

User Activity Log < 1.6.5 - Unauthenticated SQLi

Ivanti2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-32560 · Ivanti Avalanche

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary…

EPSS 99%CVSS 9.8

CVE-2023-32562 · Ivanti Avalanche

An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that could allow an attacke…

EPSS 46%CVSS 9.8

PHP Group1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-3824 · PHP Group PHP

Buffer overflow and overread in phar_dir_read()

EPSS 22%CVSS 9.8

flightbycanto1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-3452 · flightbycanto Canto

Canto <= 3.0.4 - Unauthenticated Remote File Inclusion

EPSS 7%CVSS 9.8

CyberPower3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-3265 · CyberPower PowerPanel Enterprise

An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an…

EPSS 2%CVSS 9.8

CVE-2023-3267 · CyberPower PowerPanel Enterprise

When adding a remote backup location, an authenticated user can pass arbitrary OS commands through the username field.

EPSS 2%CVSS 9.1

CVE-2023-3266 · CyberPower PowerPanel Enterprise

A non-feature complete authentication mechanism exists in the production application allowing an attacker to bypass all authentication ch…

EPSS 0.9%CVSS 9.8

mitel2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-39293 · mitel mivoice_office_400

A Command Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malic…

EPSS 2%CVSS 9.8

CVE-2023-39292 · mitel mivoice_office_400

A SQL Injection vulnerability has been identified in the MiVoice Office 400 SMB Controller through 1.2.5.23 which could allow a malicious…

EPSS 0.6%CVSS 9.8

Dataprobe2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-3259 · Dataprobe iBoot PDU

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass.

EPSS 1.0%CVSS 9.8

CVE-2023-3264 · Dataprobe iBoot PDU

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the inter…

intel3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-25775 · intel

Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user…

EPSS 1%CVSS 9.8

CVE-2022-29887 · intel

Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to pote…

EPSS 0.7%CVSS 9.6

CVE-2023-27515 · intel

Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escal…

EPSS 0.6%CVSS 9.6

Google3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-20965 · Google Android

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code.

EPSS 0.6%CVSS 9.8

CVE-2023-21242 · Google Android

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in…

CVE-2023-21287 · Google Android

In multiple locations, there is a possible code execution due to type confusion.

Huawei9 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-39405 · Huawei HarmonyOS

Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module.

CVE-2023-39400 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.

CVE-2023-39401 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.

CVE-2023-39402 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.

CVE-2021-46895 · Huawei HarmonyOS

Vulnerability of defects introduced in the design process in the Multi-Device Task Center.

CVE-2023-39385 · Huawei HarmonyOS

Vulnerability of configuration defects in the media module of certain products..

CVE-2023-39398 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.

CVE-2023-39399 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.

CVE-2023-39403 · Huawei HarmonyOS

Parameter verification vulnerability in the installd module.