The archive.

CVE-2020-21489 · mitre

File Upload vulnerability in Feehicms v.2.0.8 allows a remote attacker to execute arbitrary code via the /admin/index.php?r=admin-user%2F…

CVE-2023-34832 · mitre

TP-Link Archer AX10(EU)_V1.2_230220 was discovered to contain a buffer overflow via the function FUN_131e8 - 0x132B4.

CVE-2020-21474 · mitre

File Upload vulnerability in NucleusCMS v.3.71 allows a remote attacker to execute arbitrary code via the /nucleus/plugins/skinfiles/?dir…

CVE-2023-35839 · mitre

A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload.

CVE-2023-35855 · mitre

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying…

CVE-2023-35856 · mitre

A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary co…

CVE-2020-20735 · mitre

File Upload vulnerability in LJCMS v.4.3.R60321 allows a remote attacker to execute arbitrary code via the ljcms/index.php parameter.

CVE-2023-35784 · mitre

A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL b…

CVE-2023-35853 · mitre

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code.

CVE-2023-35857 · mitre

In Siren Investigate before 13.2.2, session keys remain active even after logging out.

EPSS 0.6%CVSS 9.8

CVE-2023-35782 · mitre

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

Ruijie1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-3306 · Ruijie RG-EW1200G

Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control

EPSS 23%CVSS 9.8

OMRON Corporation1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-27396 · OMRON Corporation Multiple OMRON products which implement FINS protocol

FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automati…

Huawei3 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2022-48472 · Huawei BiSheng-WNM

A Huawei printer has a system command injection vulnerability.

CVE-2023-34159 · Huawei HarmonyOS

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalatio…

CVE-2023-34157 · Huawei HarmonyOS

Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app.

EPSS 0.4%CVSS 10.0

ITPison1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-32753 · ITPison Contact ITPison

ITPison OMICARD EDM - Arbitrary File Upload

L7 Networks1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-32752 · L7 Networks InstantScan

L7 Networks InstantScan & InstantQoS - Arbitrary File Upload

Mozilla7 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-29531 · Mozilla Firefox

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable…

EPSS 1.0%CVSS 9.8

CVE-2023-29542 · Mozilla Firefox

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such…

CVE-2023-34416 · Mozilla Firefox ESR

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.

CVE-2023-32216 · Mozilla Firefox

Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safet…

EPSS 0.8%CVSS 9.8

CVE-2023-34417 · Mozilla Firefox

Memory safety bugs present in Firefox 113.

EPSS 0.8%CVSS 9.8

CVE-2023-25736 · Mozilla Firefox

An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior.

EPSS 0.7%CVSS 9.8

CVE-2023-29534 · Mozilla Firefox for Android

Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android.

EPSS 0.7%CVSS 9.1

Thinking Software1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-32754 · Thinking Software Efence

Thinking Software Efence - SQL injection

SICK AG2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-31411 · SICK AG EventCam App

A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication.

CVE-2023-31410 · SICK AG EventCam App

A remote unprivileged attacker can intercept the communication via e.g.

EPSS 0.3%CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-3340 · SourceCodester Online School Fees System

SourceCodester Online School Fees System GET Parameter ajx.php sql injection

EPSS 0.8%CVSS 9.8

Marksoft1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-2907 · Marksoft Marksoft

SQLi in Marksoft

EPSS 0.6%CVSS 9.8

PuneethReddyHC1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-3337 · PuneethReddyHC Online Shopping System Advanced

PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication

EPSS 0.7%CVSS 9.8

Themefic1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-47586 · Themefic Ultimate Addons for Contact Form 7

WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

EPSS 0.7%CVSS 9.8

thoefter1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-3325 · thoefter CMS Commander – Manage Multiple Sites

CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

Forcepoint1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2023-2080 · Forcepoint Cloud Security Gateway (CSG)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Forcepoint Cloud Security Gateway (…