by Kastro CVE-2023-4120 · Byzoro Smart S85F Management Platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 539 of 785
Byzoro
CVE-2023-4121 · Byzoro Smart S85F Management Platform
Byzoro Smart S85F Management Platform unrestricted upload
mitre
CVE-2023-29689 · mitre
PyroCMS 3.9 contains a remote code execution (RCE) vulnerability that can be exploited through a server-side template injection (SSTI) flaw.
CVE-2023-36210 · mitre
MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the key…
CVE-2023-39143 · mitre
PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files.
CVE-2023-38951 · mitre
ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arbitrary files on t…
CVE-2023-38942 · mitre
Dango-Translator v4.5.5 was discovered to contain a remote command execution (RCE) vulnerability via the component app/config/cloud_confi…
CVE-2023-36213 · mitre
SQL injection vulnerability in MotoCMS v.3.4.3 allows a remote attacker to gain privileges via the keyword parameter of the search function.
CVE-2023-39551 · mitre
PHPGurukul Online Security Guards Hiring System v.1.0 is vulnerable to SQL Injection via osghs/admin/search.php.
CVE-2023-36217 · mitre
Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field o…
CVE-2023-37679 · mitre
A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 allows attackers to execute arbitrary commands on the host…
CVE-2023-38941 · mitre
django-sspanel v2022.2.2 was discovered to contain a remote command execution (RCE) vulnerability via the component sspanel/admin_view.py…
CVE-2023-33374 · mitre
Connected IO v2.1.0 and prior has a command as part of its communication protocol allowing the management platform to specify arbitrary O…
CVE-2023-33377 · mitre
Connected IO v2.1.0 and prior has an OS command injection vulnerability in the set firewall command in part of its communication protocol…
CVE-2023-33371 · mitre
Control ID IDSecure 4.7.26.0 and prior uses a hardcoded cryptographic key in order to sign and verify JWT session tokens, allowing attack…
CVE-2023-33372 · mitre
Connected IO v2.1.0 and prior uses a hard-coded username/password pair embedded in their device's firmware used for device communication…
CVE-2023-33375 · mitre
Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take c…
CVE-2023-33376 · mitre
Connected IO v2.1.0 and prior has an argument injection vulnerability in its iptables command message in its communication protocol, enab…
CVE-2023-33378 · mitre
Connected IO v2.1.0 and prior has an argument injection vulnerability in its AT command message in its communication protocol, enabling a…
CVE-2023-36131 · mitre
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password param…
CVE-2023-36132 · mitre
PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.
CVE-2023-36133 · mitre
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.
CVE-2023-33665 · mitre
ai-dev aitable before v0.2.2 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
CVE-2023-33666 · mitre
ai-dev aioptimizedcombinations before v0.1.3 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php.
CVE-2023-36134 · mitre
In PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) all…
CVE-2023-38954 · mitre
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
CVE-2023-33369 · mitre
A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure…
CVE-2023-37364 · mitre
In WS-Inc J WBEM Server 4.7.4 before 4.7.5, the CIM-XML protocol adapter does not disable entity resolution.
CVE-2023-36139 · mitre
In PHPJabbers Cleaning Business Software 1.0, lack of verification when changing an email address and/or password (on the Profile Page) a…
aerospike
CVE-2023-36480 · aerospike aerospike-client-java
Aerospike Java Client vulnerable to unsafe deserialization of server responses
pnpm
gatesair
nomachine
GitLab
Mitsubishi Electric Corporation
CVE-2023-3346 · Mitsubishi Electric Corporation MITSUBISHI CNC M800V Series M800VW
Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
CVE-2023-3373 · Mitsubishi Electric Corporation GOT2000 Series GT21 model
Predictable Exact Value from Previous Values vulnerability in Mitsubishi Electric Corporation GOT2000 Series GT21 model versions 01.49.00…
metabase
Xiaomi
CVE-2023-26317 · Xiaomi Xiaomi router
Xiaomi router external request interface has command injection
Mozilla
CVE-2023-4056 · Mozilla Firefox
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13.
CVE-2023-4057 · Mozilla Firefox
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.
CVE-2023-4058 · Mozilla Firefox
Memory safety bugs present in Firefox 115.
OX Software GmbH
CVE-2023-26443 · OX Software GmbH OX App Suite
Full-text autocomplete search allows user-provided SQL syntax to be injected to SQL statements.
Axis Communications AB
CVE-2023-21408 · Axis Communications AB AXIS License Plate Verifier
Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP
CVE-2023-21409 · Axis Communications AB AXIS License Plate Verifier
Insufficient file permissions leak administrator-privileged credentials in AXIS License Verifier ACAP
connectedio
CVE-2023-33379 · connectedio connected_io
Connected IO v2.1.0 and prior has a misconfiguration in their MQTT broker used for management and device communication, which allows devi…
CVE-2023-33373 · connectedio connected_io