by Kastro CVE-2023-29300 · Adobe ColdFusion
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 544 of 785
Adobe
mitre
CVE-2023-37629 · mitre
Online Piggery Management System 1.0 is vulnerable to File Upload.
CVE-2023-26563 · mitre
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal.
CVE-2023-26564 · mitre
The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal.
CVE-2023-30151 · mitre
A SQL injection vulnerability in the Boxtal (envoimoinscher) module for PrestaShop, after version 3.1.10, allows remote attackers to exec…
CVE-2023-31704 · mitre
Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate p…
CVE-2023-33274 · mitre
The authentication mechanism in PowerShield SNMP Web Pro 1.1 contains a vulnerability that allows unauthenticated users to directly acces…
CVE-2023-37628 · mitre
Online Piggery Management System 1.0 is vulnerable to SQL Injection.
CVE-2023-37627 · mitre
Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection.
CVE-2023-33668 · mitre
DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared comput…
CVE-2023-37839 · mitre
An arbitrary file upload vulnerability in /dede/file_manage_control.php of DedeCMS v5.7.109 allows attackers to execute arbitrary code vi…
CVE-2023-38198 · mitre
acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023.
CVE-2023-38199 · mitre
coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request headers on some platforms.
SonicWall
CVE-2023-34132 · SonicWall GMS
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks.
CVE-2023-34124 · SonicWall GMS
The authentication mechanism in SonicWall GMS and Analytics Web Services had insufficient checks, allowing authentication bypass.
CVE-2023-34137 · SonicWall GMS
SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentica…
CVE-2023-34136 · SonicWall GMS
Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by t…
CVE-2023-34128 · SonicWall GMS
Tomcat application credentials are hardcoded in SonicWall GMS and Analytics configuration file.
CVE-2023-34130 · SonicWall GMS
SonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to encrypt sensitive data.
Unitronics
Apache Software Foundation
CVE-2023-37582 · Apache Software Foundation Apache RocketMQ
Apache RocketMQ: Possible remote code execution when using the update configuration function
CVE-2023-30429 · Apache Software Foundation Apache Pulsar
Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy
Rockwell Automation
CVE-2023-3595 · Rockwell Automation 1756-EN2T Series A, B, C
Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
ELECOM CO.,LTD.
Microsoft
CVE-2023-32057 · Microsoft Windows 10 Version 1809
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
wpeverest
CVE-2023-3342 · wpeverest User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
orchidsoftware
Suncreate
CVE-2023-3625 · Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Write-UploadFile UploadFile.ashx unrestricted upload
CVE-2023-3626 · Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System
Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System UpLoadFloodPlanFile UpLoadFloodPlanFile.ashx unrestricted upload
Citrix
CVE-2023-24492 · Citrix Citrix Secure Access client for Ubuntu
A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotel…
CVE-2023-20918 · Google Android
In getPendingIntentLaunchFlags of ActivityOptions.java, there is a possible elevation of privilege due to a confused deputy with no addit…
CVE-2023-21250 · Google Android
In gatt_end_operation of gatt_utils.cc, there is a possible out of bounds write due to a missing bounds check.
zopefoundation
CVE-2023-37271 · zopefoundation RestrictedPython
RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
Honeywell
CVE-2023-23585 · Honeywell Experion Server
Server DoS due to heap overflow
CVE-2023-24480 · Honeywell C300
Controller stack overflow when decoding messages from the server
CVE-2023-25078 · Honeywell Experion Server
DoS due to heap overflow
CVE-2023-25770 · Honeywell C300
Controller stack overflow on decoding messages from the server
CVE-2023-25178 · Honeywell C300
Controller design flaw - unsigned firmware
umbraco
Sensormatic Electronics, a subsidiary of Johnson Controls, Inc.
CVE-2023-3127 · Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. iSTAR Ultra
Improper Authentication in iSTAR
SourceCodester
CVE-2023-3657 · SourceCodester AC Repair and Services System
SourceCodester AC Repair and Services System HTTP POST Request sql injection
CVE-2023-3658 · SourceCodester AC Repair and Services System
SourceCodester AC Repair and Services System HTTP POST Request sql injection
CVE-2023-3661 · SourceCodester AC Repair and Services System
SourceCodester AC Repair and Services System sql injection
CVE-2023-3644 · SourceCodester Service Provider Management System