by Kastro CVE-2023-36469 · xwiki xwiki-platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 547 of 785
xwiki
CVE-2023-36468 · xwiki xwiki-platform
Upgrading doesn't prevent exploiting vulnerable XWiki documents
CVE-2023-36470 · xwiki xwiki-platform
Code injection in icon themes of XWiki Platform
CVE-2023-36471 · xwiki xwiki-commons
HTML sanitizer allows form elements in restricted in org.xwiki.commons:xwiki-commons-xml
CVE-2023-36477 · xwiki xwiki-platform
Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform
Ivanti
CVE-2023-28324 · Ivanti Ivanti Endpoint Manager
A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remot…
CVE-2023-28323 · Ivanti Ivanti Endpoint Manager
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights.
mitre
CVE-2023-26258 · mitre
Arcserve UDP through 9.0.6034 allows authentication bypass.
CVE-2020-22151 · mitre
Permissions vulnerability in Fuel-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted zip file to the assests pa…
CVE-2020-22153 · mitre
File Upload vulnerability in FUEL-CMS v.1.4.6 allows a remote attacker to execute arbitrary code via a crafted .php file to the upload pa…
CVE-2020-22336 · mitre
An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
CVE-2023-31543 · mitre
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to th…
CVE-2020-25969 · mitre
gnuplot v5.5 was discovered to contain a buffer overflow via the function plotrequest().
CVE-2023-36258 · mitre
An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can b…
CVE-2023-37303 · mitre
An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3.
CVE-2023-30319 · mitre
Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java in wliang6 ChatEngine commit fded8e710ad5…
CVE-2023-36934 · mitre
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2…
CVE-2023-36665 · mitre
"protobuf.js (aka protobufjs) 6.10.0 through 7.x before 7.2.5 allows Prototype Pollution, a different vulnerability than CVE-2022-25878.
CVE-2023-29381 · mitre
An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows a remote attacker to escalate privileges and obtain sensitive informatio…
CVE-2023-29382 · mitre
An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows an attacker to execute arbitrary code via the sfdc_preauth.jsp component.
CVE-2020-18432 · mitre
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges.
Unknown
snyk
CVE-2023-26136 · snyk
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using Co…
CVE-2023-26135 · snyk
All versions of the package flatnest are vulnerable to Prototype Pollution via the nest() function in the flatnest/nest.js file.
stellarwp
CVE-2023-2834 · stellarwp Bookit — Booking & Appointment Calendar
BookIt <= 2.3.7 - Authentication Bypass
jerrscript-project
CVE-2020-22597 · jerrscript-project jerryscript
An issue in Jerrscript- project Jerryscrip v.
fossbilling
CVE-2023-3490 · fossbilling fossbilling/fossbilling
SQL Injection in fossbilling/fossbilling
glpi-project
Medtronic
CVE-2023-31222 · Medtronic Paceart Optima
Medtronic Paceart MSMQ Deserialization of Untrusted Data
Apache Software Foundation
CVE-2023-35797 · Apache Software Foundation Apache Airflow Apache Hive Provider
Apache Airflow Hive Provider Beeline RCE with Principal
nexxtsolutions
HP Inc.
scipy
cyberlord92
CVE-2023-3249 · cyberlord92 Web3 – Crypto wallet Login & NFT token gating
Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass
Mitsubishi Electric Corporation
CVE-2023-2846 · Mitsubishi Electric Corporation MELSEC-F Series FX3U-16MR/ES
Authentication Bypass Vulnerability in MELSEC-F Series main module
Campcodes
CVE-2023-3473 · Campcodes Retro Cellphone Online Store
Campcodes Retro Cellphone Online Store edit_product.php sql injection
Western Digital
CVE-2023-22814 · Western Digital My Cloud OS 5
Authentication Bypass issue in My Cloud OS 5 devices
SmartWeb Infotech
CVE-2023-3504 · SmartWeb Infotech Job Board
SmartWeb Infotech Job Board My Profile Page account unrestricted upload
Ubiquiti Inc.
CVE-2023-28365 · Ubiquiti Inc. UniFi Network application
A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows applicatio…
CVE-2023-31997 · Ubiquiti Inc. UniFi OS
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB.
Huawei
CVE-2021-46890 · Huawei HarmonyOS
Vulnerability of incomplete read and write permission verification in the GPU module.
CVE-2021-46891 · Huawei HarmonyOS
Vulnerability of incomplete read and write permission verification in the GPU module.
CVE-2023-3455 · Huawei HarmonyOS