The archive.

CVE-2023-26616 · d-link dir-823g

D-Link DIR-823G firmware version 1.02B05 has a buffer overflow vulnerability, which originates from the URL field in SetParentsControlInfo.

CVE-2023-32222 · D-Link DSL-G256DG firmware version vBZ_1.00.27

D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass

EPSS 2%CVSS 9.8

CVE-2023-32224 · D-Link DSL-224 firmware version 3.0.10

D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

mitre20 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-30261 · mitre

Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.

EPSS 32%public exploit CVSS 9.8

CVE-2023-33404 · mitre

An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and e…

EPSS 26%public exploit CVSS 9.8

CVE-2023-34598 · mitre

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the i…

EPSS 47%public exploit CVSS 9.8

CVE-2023-34849 · mitre

An unauthorized command injection vulnerability exists in the ActionLogin function of the webman.lua file in Ikuai router OS through 3.7.1.

EPSS 3%public exploit CVSS 9.8

CVE-2020-19902 · mitre

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code via the wex/cssjs.p…

EPSS 2%public exploit CVSS 9.8

CVE-2022-44276 · mitre

In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting in RCE.

EPSS 2%public exploit CVSS 9.8

CVE-2021-25827 · mitre

Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.

CVE-2022-48335 · mitre

Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow.

CVE-2022-48336 · mitre

Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow.

CVE-2022-48332 · mitre

Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.

CVE-2022-48333 · mitre

Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant bu…

CVE-2022-48334 · mitre

Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer…

CVE-2023-34844 · mitre

Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.

CVE-2023-34487 · mitre

itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection.

CVE-2023-33592 · mitre

Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=sy…

EPSS 4%CVSS 9.8

CVE-2021-31635 · mitre

Server-Side Template Injection (SSTI) vulnerability in jFinal v.4.9.08 allows a remote attacker to execute arbitrary code via the templat…

CVE-2022-48331 · mitre

Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow.

EPSS 0.9%CVSS 9.8

CVE-2023-36487 · mitre

The password reset function in ILIAS 7.0_beta1 through 7.20 and 8.0_beta1 through 8.1 allows remote attackers to take over the account.

CVE-2023-34735 · mitre

Property Cloud Platform Management Center 1.0 is vulnerable to error-based SQL injection.

EPSS 0.7%CVSS 9.8

CVE-2023-34738 · mitre

Chemex through 3.7.1 is vulnerable to arbitrary file upload.

EPSS 0.8%CVSS 9.8

Unknown3 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-2068 · Unknown file-manager-advanced-shortcode

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

EPSS 40%public exploit CVSS 9.8

CVE-2023-2601 · Unknown wpbrutalai

WP Brutal AI < 2.0.0 - SQL Injection via CSRF

EPSS 2%public exploit CVSS 9.8

CVE-2023-2032 · Unknown Custom 404 Pro

Custom 404 Pro < 3.8.1 - Multiple SQL Injection

snyk1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2023-26134 · snyk

Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitI…

EPSS 4%public exploit CVSS 9.8

Trend Micro, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2023-32521 · Trend Micro, Inc. Trend Micro Moibile Security for Enterprise

A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticate…

EPSS 67%public exploit CVSS 9.1

CVE-2023-32557 · Trend Micro, Inc. Trend Micro Apex One

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an…

ucopia1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2022-44720 · ucopia weblib

An issue was discovered in Weblib Ucopia before 6.0.13.

EPSS 3%public exploit CVSS 9.8

inspireui1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2023-3197 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud

MStore API <= 4.0.1 - Unauthenticated SQL Injection

EPSS 4%CVSS 9.8

parse-community1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-36475 · parse-community parse-server

Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution

EPSS 3%CVSS 9.8

Samsung Mobile1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-21517 · Samsung Mobile Samsung Mobile Devices

Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code.

EPSS 2%CVSS 9.8

stw-mobile-machines1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-35830 · stw-mobile-machines tcg-4

STW (aka Sensor-Technik Wiedemann) TCG-4 Connectivity Module DeploymentPackage_v3.03r0-Impala and DeploymentPackage_v3.04r2-Jellyfish and…

IBM1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-27866 · IBM Informix JDBC

IBM Informix JDBC code execution

Monkey Wrench Inc.1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2023-32623 · Monkey Wrench Inc. Snow Monkey Forms

Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary fi…

EPSS 2%CVSS 9.1

plantuml1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2023-3432 · plantuml plantuml/plantuml

Server-Side Request Forgery (SSRF) in plantuml/plantuml

EPSS 0.9%CVSS 10.0

Siemens1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-36660 · Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem

The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.