by Kastro CVE-2023-35078 · Ivanti Endpoint Manager Mobile
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 541 of 785
Ivanti
mitre
CVE-2023-31465 · mitre
An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28.
CVE-2023-37677 · mitre
Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_edit…
CVE-2023-32231 · mitre
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.818.
CVE-2023-32232 · mitre
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836.
CVE-2022-46898 · mitre
An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8.
CVE-2023-26859 · mitre
SQL injection vulnerability found in PrestaShop sendinblue v.4.0.15 and before allow a remote attacker to gain privileges via the ajaxOrd…
CVE-2023-34798 · mitre
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
codehaus-plexus
CVE-2023-37460 · codehaus-plexus plexus-archiver
Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver
jgraph
CVE-2023-3975 · jgraph jgraph/drawio
OS Command Injection in jgraph/drawio
CVE-2023-3974 · jgraph jgraph/drawio
OS Command Injection in jgraph/drawio
CVE-2023-3973 · jgraph jgraph/drawio
Cross-site Scripting (XSS) - Reflected in jgraph/drawio
PaddlePaddle
CVE-2023-38673 · PaddlePaddle PaddlePaddle
Command injection in fs.py
CVE-2023-38669 · PaddlePaddle PaddlePaddle
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.
CVE-2023-38671 · PaddlePaddle PaddlePaddle
Heap buffer overflow in paddle.trace
dataease
envoyproxy
Open Babel
CVE-2022-41793 · Open Babel Open Babel
An out-of-bounds write vulnerability exists in the CSR format title functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-42885 · Open Babel Open Babel
A use of uninitialized pointer vulnerability exists in the GRO format res functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-46289 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-46290 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-46291 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…
CVE-2022-46292 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…
CVE-2022-46294 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…
CVE-2022-46295 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…
CVE-2022-46293 · Open Babel Open Babel
Multiple out-of-bounds write vulnerabilities exist in the translationVectors parsing functionality in multiple supported formats of Open…
Apache Software Foundation
CVE-2023-37895 · Apache Software Foundation Apache Jackrabbit Webapp (jackrabbit-webapp)
Apache Jackrabbit RMI access can lead to RCE
CVE-2023-34478 · Apache Software Foundation Apache Shiro
Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.
CVE-2023-38647 · Apache Software Foundation Apache Helix
Apache Helix: Deserialization vulnerability in Helix workflow and REST
CVE-2023-35088 · Apache Software Foundation Apache InLong
Apache InLong: SQL injection in audit endpoint
Fortinet
getkirby
Hewlett Packard Enterprise (HPE)
CVE-2023-35980 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-35981 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-35982 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
Generic Model Organism Database Project
CVE-2023-32637 · Generic Model Organism Database Project GBrowse
GBrowse accepts files with any formats uploaded and places them in the area accessible through unauthenticated web requests.
NodeBB
instawp
CVE-2023-3956 · instawp InstaWP Connect – 1-click WP Staging & Migration
InstaWP Connect <= 0.0.9.18 - Missing Authorization to Unauthenticated Post/Taxonomy/User Add/Change/Delete, Customizer Setting Change, Plugin Installation/Activation/Deactication via events_receiver
teleadapt
CVE-2023-33743 · teleadapt roomcast_ta-2400
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Access Control; specifically, Android Debug Bridge (adb) is available.
CVE-2023-33744 · teleadapt roomcast_ta-2400
TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Use of a Hard-coded Password (PIN): 385521, 843646, and 592671.
CVE-2023-33745 · teleadapt roomcast_ta-2400
TeleAdapt RoomCast TA-2400 1.0 through 3.1 is vulnerable to Improper Privilege Management: from the shell available after an adb connecti…
Infodrom Software
CVE-2023-35066 · Infodrom Software E-Invoice Approval System
SQLi in Infodrom Sofwares E-Invoice Approval System
phpscriptpoint
CVE-2023-3854 · phpscriptpoint BloodBank
phpscriptpoint BloodBank POST Parameter search sql injection
CVE-2023-3859 · phpscriptpoint Car Listing
phpscriptpoint Car Listing GET Parameter search.php sql injection
SourceCodester
CVE-2023-3850 · SourceCodester Lost and Found Information System