by Kastro CVE-2023-39001 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,219 matching vulnerabilities · Page 536 of 785
mitre
CVE-2023-39008 · mitre
A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edit…
CVE-2023-39007 · mitre
/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via open…
CVE-2023-37734 · mitre
EZ softmagic MP3 Audio Converter 2.7.3.700 was discovered to contain a buffer overflow.
CVE-2023-37068 · mitre
Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unautho…
CVE-2023-37069 · mitre
Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate…
CVE-2023-39004 · mitre
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2…
CVE-2023-39776 · mitre
A File Upload vulnerability in PHPJabbers Ticket Support Script v3.2 allows attackers to execute arbitrary code via uploading a crafted f…
CVE-2023-36311 · mitre
There is a SQL injection (SQLi) vulnerability in the "column" parameter of index.php in PHPJabbers Document Creator v1.0.
CVE-2023-34545 · mitre
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
CVE-2023-39805 · mitre
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php.
CVE-2023-39806 · mitre
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function.
endojs
Lindell TSS Implementations
CVE-2023-33242 · Lindell TSS Implementations Wallet
Lindell17 TSS Abort Mishandling
1Panel-dev
Advantech
CVE-2023-4202 · Advantech EKI-1524
Stored Cross-Site Scripting
CVE-2023-4203 · Advantech EKI-1524
Stored Cross-Site Scripting
Ivanti
CVE-2023-32563 · Ivanti Avalanche
An unauthenticated attacker could achieve the code execution through a RemoteControl server.
CVE-2023-32564 · Ivanti Avalanche
An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.4.1 and below that could allow an attacke…
CVE-2023-32567 · Ivanti Wavelink
Ivanti Avalanche decodeToMap XML External Entity Processing.
CVE-2023-32565 · Ivanti Avalanche
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.
CVE-2023-32566 · Ivanti Avalanche
An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.
kramerav
Microsoft
CVE-2023-21709 · Microsoft Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-35385 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36903 · Microsoft Windows 10 Version 1507
Windows System Assessment Tool Elevation of Privilege Vulnerability
CVE-2023-36911 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-38186 · Microsoft Windows 10 Version 21H2
Windows Mobile Device Management Elevation of Privilege Vulnerability
Zoom Video Communications, Inc.
CVE-2023-36534 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows
Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege vi…
CVE-2023-39213 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows and Zoom VDI Client
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthentic…
CVE-2023-39216 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of p…
Adobe
Ubiquiti Inc
CVE-2023-38034 · Ubiquiti Inc UniFi Access Points
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, co…
CVE-2023-35085 · Ubiquiti Inc UniFi Access Points
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and defau…
OPPO
CVE-2023-26310 · OPPO OPPO Find X3
Command Injection In OPPO Service
CVE-2023-26309 · OPPO OnePlus Store
A remote code execution vulnerability in the webview component
CVE-2023-26311 · OPPO OPPO Store
A remote code execution vulnerability in the webview component of OPPO Store app.
AMD
CVE-2023-20586 · AMD Radeon™ Software Crimson ReLive Edition
Radeon™ Software Crimson ReLive Edition
Apache Software Foundation
CVE-2023-33934 · Apache Software Foundation Apache Traffic Server
Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies
GG TSS Implementations
CVE-2023-33241 · GG TSS Implementations Wallet
GG18 / GG20 TSS Beta Parameter Vulnerability
Siemens
CVE-2023-37372 · Siemens RUGGEDCOM CROSSBOW
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4).
Sifir Bes Education and Informatics
CVE-2023-3632 · Sifir Bes Education and Informatics Kunduz - Homework Helper App
Hard-coded Cryptographic Key in Kunduz - Homework Helper App
Farmakom
CVE-2023-3717 · Farmakom Remote Administration Console
SQLi in Farmakoms Remote Administration Console
Samsung Mobile
a2
CVE-2023-3386 · a2 Camera Trap Tracking System
SQLi in a2 Camera Trap Tracking System
CVE-2023-3522 · a2 License Portal System
SQLi in a2 License Portal System
trailofbits
CVE-2023-39969 · trailofbits uthenticode