by Kastro CVE-2023-33532 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 553 of 785
mitre
CVE-2023-31569 · mitre
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.
CVE-2023-33556 · mitre
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the staticGw parameter at /setting…
CVE-2023-33386 · mitre
MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background.
CVE-2023-33496 · mitre
xxl-rpc v1.7.0 was discovered to contain a deserialization vulnerability via the component com.xxl.rpc.core.remoting.net.impl.netty.codec…
CVE-2023-33553 · mitre
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via mani…
CVE-2023-33863 · mitre
SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow.
CVE-2023-33864 · mitre
StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow.
CVE-2023-30400 · mitre
An issue was discovered in Anyka Microelectronics AK3918EV300 MCU v18.
CVE-2023-34409 · mitre
In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formal…
CVE-2023-29629 · mitre
PrestaShop jmsthemelayout 2.5.5 is vulnerable to SQL Injection via ajax_jmsvermegamenu.php.
CVE-2023-29630 · mitre
PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.
CVE-2023-29632 · mitre
PrestaShop jmspagebuilder 3.x is vulnerable to SQL Injection via ajax_jmspagebuilder.php.
CVE-2023-33282 · mitre
Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials.
CVE-2023-29631 · mitre
PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.
CVE-2023-31116 · mitre
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300.
CVE-2023-33604 · mitre
Imperial CMS v7.5 was discovered to contain an arbitrary file deletion vulnerability via the DelspReFile function in /sp/ListSp.php.
CVE-2023-31114 · mitre
An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300.
taosdata
machothemes
Mobatime
CVE-2023-3065 · Mobatime Mobatime mobile application AMXGT100
Mobatime mobile application - Authentication bypass
ValvePress
CVE-2021-4374 · ValvePress WordPress Automatic Plugin
WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update
tunafish
CVE-2020-36705 · tunafish Adning Advertising
Adning Advertising <= 1.5.5 - Arbitrary File Upload
Wordfence
nmedia
CVE-2021-4368 · nmedia Frontend File Manager Plugin
Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload
CVE-2021-4356 · nmedia Frontend File Manager Plugin
Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download
f1logic
CVE-2020-36727 · f1logic Newsletter Manager
Newsletter Manager <= 1.5.1 - Insecure Deserialization
inspireui
CVE-2020-36713 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 2.1.5 - Authentication Bypass
ninjateam
CVE-2020-36718 · ninjateam GDPR CCPA Compliance & Cookie Consent Banner
GDPR CCPA Compliance Support <= 2.3 - PHP Object Injection
niteo
CVE-2020-36730 · niteo CMP – Coming Soon & Maintenance Plugin by NiteoThemes
CMP <= 3.8.1 - Missing Authorization
rustaurius
CVE-2020-36726 · rustaurius Ultimate Reviews
Ultimate Reviews < 2.1.33 - PHP Object Injection
wordable
CVE-2020-36724 · wordable Wordable – Export Google Docs to WordPress
Wordable <= 3.1.1 - Authentication Bypass
ABB Ltd.
CVE-2023-0636 · ABB Ltd. ASPECT®-Enterprise
Remote Code Execution via Command Injection
CVE-2023-0635 · ABB Ltd. ASPECT®-Enterprise
Privilege escalation to root
stylemix
CVE-2021-4343 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Creation
CVE-2021-4370 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Missing Authorization
CVE-2021-4381 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated Options Changes via wp_route
CVE-2021-4340 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated SQL Injection
CVE-2021-4341 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated Wordpress Options Changes via AJAX
CVE-2021-4346 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated Arbitrary Account Changes
CVE-2021-4357 · stylemix Directory Listings WordPress plugin – uListing
uListing <= 1.6.6 - Unauthenticated Arbitrary Post/Page Deletion
wpkube
Puppet
waseem_senjer
CVE-2021-4360 · waseem_senjer Controlled Admin Access
Controlled Admin Access < 1.5.6 - Privilege Escalation
Advantech
CVE-2023-32540 · Advantech WebAccess/SCADA
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwr…
CVE-2023-32628 · Advantech WebAccess/SCADA
In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the…
Triangle MicroWorks
zorem
CVE-2021-4347 · zorem Advanced Shipment Tracking for WooCommerce
Advanced Shipment Tracking for WooCommerce <= 3.2.6 - Authenticated WordPress Options Change
Canonical Ltd.
CVE-2023-32550 · Canonical Ltd. Landscape