The archive.

CVE-2023-39017 · mitre

quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMes…

CVE-2023-39022 · mitre

oscore v2.2.6 and below was discovered to contain a code injection vulnerability in the component com.opensymphony.util.EJBUtils.createSt…

CVE-2023-33561 · mitre

Improper input validation of password parameter in PHP Jabbers Time Slots Booking Calendar v 3.3 results in insecure passwords.

EPSS 1.0%public exploit CVSS 9.8

CVE-2023-39020 · mitre

stanford-parser v3.9.2 and below was discovered to contain a code injection vulnerability in the component edu.stanford.nlp.io.getBZip2Pi…

CVE-2023-39021 · mitre

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.…

CVE-2023-39023 · mitre

university compass v2.2.0 and below was discovered to contain a code injection vulnerability in the component org.compass.core.executor.D…

CVE-2020-21662 · mitre

SQL injection vulnerability in yunyecms 2.0.2 allows remote attackers to run arbitrary SQL commands via XFF.

CVE-2023-33562 · mitre

User enumeration is found in in PHP Jabbers Time Slots Booking Calendar v3.3.

CVE-2023-39010 · mitre

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load.

CVE-2023-39013 · mitre

Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.i…

CVE-2023-39015 · mitre

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.down…

CVE-2023-39016 · mitre

bboss-persistent v6.0.9 and below was discovered to contain a code injection vulnerability in the component com.frameworkset.common.poolm…

CVE-2023-39122 · mitre

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter.

EPSS 0.7%public exploit CVSS 9.8

CVE-2023-34960 · mitre

A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11.* up to v1.11.18 allows attackers to execute arbitrary c…

EPSS 99%CVSS 9.8

CVE-2022-42183 · mitre

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery (SSRF).

EPSS 0.7%public exploit CVSS 9.1

CVE-2023-34842 · mitre

Remote Code Execution vulnerability in DedeCMS through 5.7.109 allows remote attackers to run arbitrary code via crafted POST request to…

CVE-2023-39018 · mitre

FFmpeg 0.7.0 and below was discovered to contain a code injection vulnerability in the component net.bramp.ffmpeg.FFmpeg.<constructor>.

EPSS 0.9%CVSS 9.8

CVE-2023-33493 · mitre

An Unrestricted Upload of File with Dangerous Type vulnerability in the Ajaxmanager File and Database explorer (ajaxmanager) module for P…

EPSS 0.9%CVSS 9.8

CVE-2023-37647 · mitre

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php.

EPSS 0.6%CVSS 9.8

supermicro1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2023-35861 · supermicro h12dst-b

A shell-injection vulnerability in email notifications on Supermicro motherboards (such as H12DST-B before 03.10.35) allows remote attack…

EPSS 2%public exploit CVSS 9.8

thorsten1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-4006 · thorsten thorsten/phpmyfaq

Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-3988 · VulDB

Cafe Billing System Order index.php sql injection

tp-link1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-31710 · tp-link archer_ax21

TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow.

EPSS 0.7%public exploit CVSS 9.8

fossbilling1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-4005 · fossbilling fossbilling/fossbilling

Insufficient Session Expiration in fossbilling/fossbilling

EPSS 0.5%public exploit CVSS 9.8

dlink2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-36092 · dlink dir-859_firmware

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgi_main.

EPSS 2%CVSS 9.8

CVE-2023-36090 · dlink dir-885l_firmware

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi.

ruijienetworks1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-34644 · ruijienetworks rg-ew1200

Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW_3.0(1)B11P204, RG-NBS and RG-S…

EPSS 2%CVSS 9.8

Apple5 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

d-link2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-36089 · d-link dir-645_firmware

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via func…

CVE-2023-36091 · d-link dir-895

Authentication Bypass vulnerability in D-Link DIR-895 FW102b07 allows remote attackers to gain escalated privileges via via function phpc…

Synel2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-37213 · Synel SYnergy Fingerprint Terminals

Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'