by Kastro CVE-2023-35150 · xwiki xwiki-platform
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 549 of 785
xwiki
CVE-2023-35156 · xwiki xwiki-platform
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
CVE-2023-35159 · xwiki xwiki-platform
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
CVE-2023-35160 · xwiki xwiki-platform
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
CVE-2023-35162 · xwiki xwiki-platform
XPlatform Wiki vulnerable to cross-site scripting via xcontinue parameter in preview actions template
CVE-2023-35158 · xwiki xwiki-platform
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
CVE-2023-35152 · xwiki xwiki-platform
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
CVE-2023-34465 · xwiki xwiki-platform
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
CVE-2023-35166 · xwiki xwiki-platform
Privilege escalation (PR) from account through TipsPanel
CVE-2023-35153 · xwiki xwiki-platform
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
CVE-2023-35161 · xwiki xwiki-platform
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
CVE-2023-34464 · xwiki xwiki-platform
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
enrollment_system_project
CVE-2023-33584 · enrollment_system_project enrollment_system
Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQ…
mitre
CVE-2023-32571 · mitre
Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods…
CVE-2023-34939 · mitre
Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component Upload…
CVE-2023-29931 · mitre
laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.
CVE-2023-36097 · mitre
funadmin v3.3.2 and v3.3.3 are vulnerable to Insecure file upload via the plugins install.
CVE-2023-34601 · mitre
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
CVE-2023-29711 · mitre
An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via craf…
CVE-2023-30258 · mitre
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthe…
VMware
CVE-2023-20894 · VMware VMware vCenter Server (vCenter Server)
The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.
CVE-2023-20892 · VMware VMware vCenter Server (vCenter Server)
VMware vCenter Server heap-overflow vulnerability
CVE-2023-20895 · VMware VMware vCenter Server (vCenter Server)
The VMware vCenter Server contains a memory corruption vulnerability in the implementation of the DCERPC protocol.
CVE-2023-20893 · VMware VMware vCenter Server (vCenter Server)
The VMware vCenter Server contains a use-after-free vulnerability in the implementation of the DCERPC protocol.
Grafana
Webklex
SourceCodester
CVE-2023-3391 · SourceCodester Human Resource Management System
SourceCodester Human Resource Management System detailview.php sql injection
CVE-2023-3383 · SourceCodester Game Result Matrix System
SourceCodester Game Result Matrix System GET Parameter athlete-profile.php sql injection
Fortra
Yoga Class Registration System
CVE-2023-1721 · Yoga Class Registration System Yoga Class Registration System
Yoga Class Registration System 1.0 - RCE
CVE-2023-1722 · Yoga Class Registration System Yoga Class Registration System
Yoga Class Registration System 1.0 - ATO
Fortinet
tp-link
Apple
CVE-2023-32387 · Apple macOS
A use-after-free issue was addressed with improved memory management.
CVE-2023-32412 · Apple macOS
A use-after-free issue was addressed with improved memory management.
CVE-2022-22630 · Apple macOS
A use after free issue was addressed with improved memory management.
CVE-2023-32419 · Apple iOS and iPadOS
The issue was addressed with improved bounds checks.
Apache Software Foundation
CVE-2023-34340 · Apache Software Foundation Apache Accumulo
Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
livebook-dev
nextcloud
CVE-2023-35172 · nextcloud security-advisories
Nextcloud Server password reset endpoint is not brute force protected
tauri-apps
Pegasystems
Silicon Labs
CVE-2023-0972 · Silicon Labs Z/IP Gateway
Buffer overflow in S0 Decryption on Z/IP Gatweay
CVE-2023-3110 · Silicon Labs Unify Gateway
Buffer overflow in S0 Decryption on Unify Gateway
CVE-2023-0971 · Silicon Labs Z/IP Gateway