by Kastro CVE-2023-39001 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 537 of 785
mitre
CVE-2023-39008 · mitre
A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edit…
CVE-2023-39007 · mitre
/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via open…
CVE-2023-37068 · mitre
Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unautho…
CVE-2023-39004 · mitre
Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2…
CVE-2023-39976 · mitre
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
CVE-2023-34545 · mitre
A SQL injection vulnerability in CSZCMS 1.3.0 allows remote attackers to run arbitrary SQL commands via p parameter or the search URL.
CVE-2023-37682 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php.
endojs
totolink
CVE-2023-40042 · totolink t10_v2
TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so.
CVE-2023-40041 · totolink t10_v2
TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so.
Advantech
CVE-2023-4202 · Advantech EKI-1524
Stored Cross-Site Scripting
CVE-2023-4203 · Advantech EKI-1524
Stored Cross-Site Scripting
kramerav
SAP_SE
CVE-2023-37483 · SAP_SE SAP PowerDesigner
Improper Access Control Vulnerabilities in SAP PowerDesigner
CVE-2023-39439 · SAP_SE SAP Commerce
SAP Commerce accepts empty passphrases.
CVE-2023-37490 · SAP_SE SAP BusinessObjects Business Intelligence (Installer)
Binary hijack in SAP BusinessObjects Business Intelligence (Installer)
Microsoft
CVE-2023-21709 · Microsoft Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-35385 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36903 · Microsoft Windows 10 Version 1507
Windows System Assessment Tool Elevation of Privilege Vulnerability
CVE-2023-36911 · Microsoft Windows 10 Version 1507
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-38186 · Microsoft Windows 10 Version 21H2
Windows Mobile Device Management Elevation of Privilege Vulnerability
PHOENIX CONTACT
CVE-2023-3526 · PHOENIX CONTACT CLOUD CLIENT 1101T-TX/TX
PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices
CVE-2023-3572 · PHOENIX CONTACT WP 6070-WVPS
PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
PrestaShop
CVE-2023-39526 · PrestaShop PrestaShop
PrestaShopSQL manager vulnerability (potential RCE)
CVE-2023-39524 · PrestaShop PrestaShop
PrestaShop vulnerable to boolean SQL injection in search product in BO
CVE-2023-39525 · PrestaShop PrestaShop
PrestaShop vulnerable to path traversal
CVE-2023-39530 · PrestaShop PrestaShop
PrestaShop vulnerable to file deletion via CustomerMessage
CVE-2023-39529 · PrestaShop PrestaShop
PrestaShop vulnerable to file deletion via attachment API
Zoom Video Communications, Inc.
CVE-2023-36534 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows
Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege vi…
CVE-2023-39213 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows and Zoom VDI Client
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthentic…
CVE-2023-39216 · Zoom Video Communications, Inc. Zoom Desktop Client for Windows
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of p…
Adobe
AMD
CVE-2023-20586 · AMD Radeon™ Software Crimson ReLive Edition
Radeon™ Software Crimson ReLive Edition
Apache Software Foundation
CVE-2023-33934 · Apache Software Foundation Apache Traffic Server
Apache Traffic Server: Differential fuzzing for HTTP request parsing discrepancies
Siemens
CVE-2023-37372 · Siemens RUGGEDCOM CROSSBOW
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4).
CVE-2023-24845 · Siemens RUGGEDCOM i800
A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802…
Sifir Bes Education and Informatics
CVE-2023-3632 · Sifir Bes Education and Informatics Kunduz - Homework Helper App
Hard-coded Cryptographic Key in Kunduz - Homework Helper App
a2
CVE-2023-3386 · a2 Camera Trap Tracking System
SQLi in a2 Camera Trap Tracking System
CVE-2023-3522 · a2 License Portal System
SQLi in a2 License Portal System
Farmakom
CVE-2023-3717 · Farmakom Remote Administration Console
SQLi in Farmakoms Remote Administration Console
Qualcomm, Inc.
CVE-2022-40510 · Qualcomm, Inc. Snapdragon
Buffer copy without checking size of input in Audio.
CVE-2023-28561 · Qualcomm, Inc. Snapdragon
Buffer Copy Without Checking Size of Input in QESL
CVE-2023-21643 · Qualcomm, Inc. Snapdragon
Untrusted Pointer Dereference in Automotive
CVE-2023-21651 · Qualcomm, Inc. Snapdragon