The archive.

CVE-2023-33626 · mitre

D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a stack overflow via the gena.cgi binary.

EPSS 2%public exploit CVSS 9.8

CVE-2022-28550 · mitre

Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead.

CVE-2023-35042 · mitre

GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:Lit…

EPSS 45%CVSS 9.8

CVE-2023-33443 · mitre

Incorrect access control in the administrative functionalities of BES--6024PB-I50H1 VideoPlayTool v2.0.1.0 allow attackers to execute arb…

EPSS 4%CVSS 9.8

CVE-2023-35036 · mitre

In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL…

EPSS 13%CVSS 9.1

CVE-2023-27836 · mitre

TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in t…

CVE-2023-27837 · mitre

TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the key parameter in the fun…

CVE-2023-34364 · mitre

A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle.

CVE-2023-35034 · mitre

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow…

EPSS 1%CVSS 9.8

CVE-2023-29562 · mitre

TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale.

CVE-2023-34566 · mitre

Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo.

CVE-2023-27716 · mitre

An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nod…

nuxt1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-3224 · nuxt nuxt/nuxt

Code Injection in nuxt/nuxt

EPSS 59%public exploit CVSS 9.8

froxlor1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-3173 · froxlor froxlor/froxlor

Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor

snyk1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-26133 · snyk

All versions of the package progressbar.js are vulnerable to Prototype Pollution via the function extend() in the file utils.js.

tychesoftwares1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-2986 · tychesoftwares Abandoned Cart Lite for WooCommerce

Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

EPSS 43%CVSS 9.8

ValvePress1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2021-4380 · ValvePress Pinterest Automatic

Pinterest Automatic <= 4.14.3 - Unuathenticated Arbitrary Options Update

EPSS 4%CVSS 9.8

tunafish1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-36728 · tunafish Adning Advertising

Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal

EPSS 3%CVSS 9.8

Danfoss4 vulnerabilities on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2023-25911 · Danfoss AK-EM100

Authenticated OS Command Injection in Danfoss AK-EM100

EPSS 2%CVSS 9.9

CVE-2023-22583 · Danfoss AK-EM100

SQL Injection in Danfoss AK-EM100

EPSS 0.8%CVSS 10.0

CVE-2023-22582 · Danfoss AK-EM100

Reflected Cross-Site Scripting in Danfoss AK-EM100

EPSS 0.6%CVSS 9.0

CVE-2023-22585 · Danfoss AK-EM100

Reflected Cross-Site Scripting in Danfoss AK-EM100

EPSS 0.6%CVSS 9.0

Go toolchain3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-29402 · Go toolchain cmd/go

Code injection via go command with cgo in cmd/go

CVE-2023-29404 · Go toolchain cmd/go

Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

CVE-2023-29405 · Go toolchain cmd/go

Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

HP Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-26295 · HP Inc. HP Device Manager

Previous versions of HP Device Manager (prior to HPDM 5.0.10) could potentially allow command injection and/or elevation of privileges.

CVE-2023-32673 · HP Inc. HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerabl…

CVE-2023-32674 · HP Inc. HP PC Hardware Diagnostics Windows

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to buffer overflow.

sabnzbd1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2023-34237 · sabnzbd sabnzbd

Remote code execution via specially crafted script settings in SABnzbd

expresstech1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2023-0291 · expresstech Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker

Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion

EPSS 2%CVSS 9.1

KbDevice,Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-30764 · KbDevice,Inc. KB-AHR series and KB-IRIP series

OS command injection vulnerability exists in KB-AHR series and KB-IRIP series.

EPSS 1%CVSS 9.8

CVE-2023-30762 · KbDevice,Inc. KB-AHR series and KB-IRIP series

Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series.

CVE-2023-30766 · KbDevice,Inc. KB-AHR series and KB-IRIP series

Hidden functionality issue exists in KB-AHR series and KB-IRIP series.

PTC1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2023-27881 · PTC Vuforia Studio

PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type

EPSS 0.7%CVSS 9.9

Sensormatic Electronics, a subsidiary of Johnson Controls, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-0954 · Sensormatic Electronics, a subsidiary of Johnson Controls, Inc. Illustra Pro Gen 4 Dome

Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras