by Kastro CVE-2023-34192 · Synacor Zimbra Collaboration Suite (ZCS)
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 546 of 785
Synacor
Milesight
CVE-2023-23902 · Milesight UR32L
A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5.
CVE-2023-22319 · Milesight MilesightVPN
A sql injection vulnerability exists in the requestHandlers.js LoginAuth functionality of Milesight VPN v2.0.2.
CVE-2023-22844 · Milesight MilesightVPN
An authentication bypass vulnerability exists in the requestHandlers.js verifyToken functionality of Milesight VPN v2.0.2.
tenda
CVE-2023-37144 · tenda ac10
Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac.
CVE-2023-37700 · tenda fh1203
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function.
CVE-2023-37701 · tenda fh1203
Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function.
totolink
CVE-2023-37145 · totolink lr350
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOp…
CVE-2023-37146 · totolink lr350
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the Uploa…
CVE-2023-37148 · totolink lr350
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd f…
CVE-2023-37149 · totolink lr350
TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the setUp…
CVE-2023-37171 · totolink a3300r
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser parameter in the setP…
CVE-2023-37172 · totolink a3000ru
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagno…
CVE-2023-37173 · totolink a3000ru
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command parameter in the setT…
CVE-2023-37170 · totolink a3300r
TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the la…
mitre
CVE-2023-36188 · mitre
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
CVE-2023-37152 · mitre
Projectworlds Online Art Gallery Project 1.0 allows unauthenticated users to perform arbitrary file uploads via the adminHome.php page.
CVE-2023-27845 · mitre
SQL injection vulnerability found in PrestaShop lekerawen_ocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHe…
CVE-2023-36993 · mitre
The cryptographically insecure random number generator being used in TravianZ 8.3.4 and 8.3.3 in the password reset function allows an at…
CVE-2023-36994 · mitre
In TravianZ 8.3.4 and 8.3.3, Incorrect Access Control in the installation script allows an attacker to overwrite the server configuration…
CVE-2023-30320 · mitre
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java in wliang6 ChatEngine commit fded8e710ad…
CVE-2023-30321 · mitre
Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710…
radare2
cc-tweaked
nilsteampassnet
CVE-2023-3551 · nilsteampassnet nilsteampassnet/teampass
Code Injection in nilsteampassnet/teampass
mastodon
MightyPirates
SamrtSoft
CVE-2023-37286 · SamrtSoft SmartBPM.NET
SmartBPM.NET - Use of Hard-Coded Credentials - 1
CVE-2023-37287 · SamrtSoft SmartBPM.NET
SmartBPM.NET - Use of Hard-Coded Credentials - 2
Tise Technology
CVE-2023-3045 · Tise Technology Parking Web Report
SQLi in Tise Technology's Parking Web Report
keycloak
MuJS
PiiGAB
CVE-2023-35987 · PiiGAB M-Bus SoftwarePack
PiiGAB M-Bus Use of Hard-coded Credentials
CVE-2023-36859 · PiiGAB M-Bus SoftwarePack
PiiGAB M-Bus Code Injection
CVE-2023-33868 · PiiGAB M-Bus SoftwarePack
PiiGAB M-Bus Improper Restriction of Excessive Authentication Attempts
CVE-2023-34995 · PiiGAB M-Bus SoftwarePack
PiiGAB M-Bus Weak Password Requirements
CVE-2023-34433 · PiiGAB M-Bus SoftwarePack
PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
Yontem Informatics
CVE-2023-2046 · Yontem Informatics Vehicle Tracking System
SQLi in Yontem Vehicle TrackingSsystem
Huawei
CVE-2022-48510 · Huawei HarmonyOS
Input verification vulnerability in the AMS module.
CVE-2022-48511 · Huawei HarmonyOS
Use After Free (UAF) vulnerability in the audio PCM driver module under special conditions.
CVE-2022-48512 · Huawei HarmonyOS
Use After Free (UAF) vulnerability in the Vdecoderservice service.
CVE-2021-46894 · Huawei HarmonyOS
Use After Free (UAF) vulnerability in the uinput module.Successful exploitation of this vulnerability may lead to kernel privilege escala…
CVE-2022-48513 · Huawei HarmonyOS
Vulnerability of identity verification being bypassed in the Gallery module.
CVE-2023-37242 · Huawei HarmonyOS
Vulnerability of commands from the modem being intercepted in the atcmdserver module.
CVE-2023-37240 · Huawei HarmonyOS
Vulnerability of missing input length verification in the distributed file system.
CVE-2023-37245 · Huawei HarmonyOS