by Kastro CVE-2023-38203 · Adobe ColdFusion
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 542 of 785
Adobe
Citrix
mitre
CVE-2023-37165 · mitre
Millhouse-Project v1.414 was discovered to contain a remote code execution (RCE) vulnerability via the component /add_post_sql.php.
CVE-2023-38632 · mitre
async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in tcpsocket.hpp when processing malformed TCP packets.
CVE-2023-31753 · mitre
SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter.
CVE-2023-30153 · mitre
An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, a…
CVE-2023-38646 · mitre
Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server,…
MikroTik
Open Babel
CVE-2022-44451 · Open Babel Open Babel
A use of uninitialized pointer vulnerability exists in the MSI format atom functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-43467 · Open Babel Open Babel
An out-of-bounds write vulnerability exists in the PQS format coord_file functionality of Open Babel 3.1.1 and master commit 530dbfa3.
CVE-2022-46280 · Open Babel Open Babel
A use of uninitialized pointer vulnerability exists in the PQS format pFormat functionality of Open Babel 3.1.1 and master commit 530dbfa3.
Siemens
CVE-2023-38408 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution…
vmware
ONS Digital
CVE-2020-36762 · ONS Digital RAS Collection Instrument
ONS Digital RAS Collection Instrument comment.yml jobs os command injection
kratosdefense
CVE-2023-36670 · kratosdefense ngc_indoor_unit
A remotely exploitable command injection vulnerability was found on the Kratos NGC-IDU 9.1.0.4.
CVE-2023-36669 · kratosdefense ngc_indoor_unit
Missing Authentication for a Critical Function within the Kratos NGC Indoor Unit (IDU) before 11.4 allows remote attackers to obtain arbi…
iagona
OpenIdentityPlatform
CVE-2023-37471 · OpenIdentityPlatform OpenAM
User impersonation using SAMLv1.x SSO in Open Access Management
Chengdu
CVE-2023-3802 · Chengdu Flash Flood Disaster Monitoring and Warning System
Chengdu Flash Flood Disaster Monitoring and Warning System Ajaxfileupload.ashx unrestricted upload
CVE-2023-3798 · Chengdu Flash Flood Disaster Monitoring and Warning System
Chengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload
CVE-2023-3804 · Chengdu Flash Flood Disaster Monitoring and Warning System
Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx unrestricted upload
InfoDoc
CVE-2023-37289 · InfoDoc Document On-line Submission and Approval System
InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
Xiamen Four Letter
CVE-2023-3805 · Xiamen Four Letter Video Surveillance Management System
Xiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization
HP Inc.
SourceCodester
CVE-2023-3806 · SourceCodester House Rental and Property Listing System
SourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload
IBOS
VulDB
CVE-2023-3809 · VulDB
Hospital Management System patient.php sql injection
CVE-2023-3810 · VulDB
Hospital Management System patientappointment.php sql injection
CVE-2023-3811 · VulDB
Hospital Management System patientprofile.php sql injection
CVE-2023-3751 · VulDB
Super Store Finder POST Parameter index.php sql injection
Hitachi
CVE-2022-4146 · Hitachi Hitachi Replication Manager
EL Injection Vulnerability in Hitachi Replication Manager
CVE-2023-34142 · Hitachi Hitachi Device Manager
Cleartext Transmission Vulnerability in Hitachi Device Manager
Bug Finder
CVE-2023-3795 · Bug Finder ChainCity Real Estate Investment Platform
Bug Finder ChainCity Real Estate Investment Platform GET Parameter property sql injection
Weaver
Galaxy Software Services
CVE-2023-37291 · Galaxy Software Services Vitals ESP
Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key
Oracle Corporation
CVE-2023-21974 · Oracle Corporation Application Express (APEX)
Vulnerability in the Application Express Team Calendar Plugin product of Oracle Application Express (component: User Account).
CVE-2023-21975 · Oracle Corporation Application Express (APEX)