by Kastro CVE-2023-2825 · GitLab GitLab
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 555 of 785
GitLab
mitre
CVE-2023-30145 · mitre
Camaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.
CVE-2023-33735 · mitre
D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address paramete…
CVE-2021-45039 · mitre
Multiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCM…
CVE-2022-46945 · mitre
Nagvis before 1.9.34 was discovered to contain an arbitrary file read vulnerability via the component /core/classes/NagVisHoverUrl.php.
CVE-2023-28347 · mitre
An issue was discovered in Faronics Insight 10.0.19045 on Windows.
CVE-2023-33486 · mitre
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg.
CVE-2023-33487 · mitre
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vuln…
CVE-2023-33508 · mitre
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE).
CVE-2023-29727 · mitre
The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its da…
CVE-2023-29739 · mitre
An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by…
CVE-2023-29741 · mitre
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause an escalation of privileges attack by manipulating th…
CVE-2023-29747 · mitre
Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the…
CVE-2023-33730 · mitre
Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any re…
CVE-2023-29732 · mitre
SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file.
CVE-2023-29734 · mitre
An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the…
CVE-2023-33509 · mitre
KramerAV VIA GO² < 4.0.1.1326 is vulnerable to SQL Injection.
CVE-2022-24627 · mitre
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
CVE-2022-24629 · mitre
An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752.
CVE-2023-29728 · mitre
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of p…
CVE-2022-47526 · mitre
Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files.
CVE-2023-33734 · mitre
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.
CVE-2023-34205 · mitre
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML.
redhat
RIOT-OS
Supcon
mkucej
CVE-2023-3020 · mkucej mkucej/i-librarian-free
Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free
ckan
codeigniter4
CVE-2023-32692 · codeigniter4 CodeIgniter4
Remote Code Execution Vulnerability in Validation Placeholders
pomerium
nextcloud
CVE-2023-32074 · nextcloud security-advisories
Nextcloud user_oidc app is missing brute force protection
SourceCodester
CVE-2023-2955 · SourceCodester Students Online Internship Timesheet System
SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection
CVE-2023-2962 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System sql injection
VulDB
Shop Beat
CVE-2022-36246 · Shop Beat studio
Shop Beat Services Vulnerable To Insecure Permissions
CVE-2022-36247 · Shop Beat studio
Shop Beat Services Vulnerable To IDOR
code-projects
CVE-2023-2951 · code-projects Bus Dispatch and Information System
code-projects Bus Dispatch and Information System delete_bus.php sql injection
ITRS Group
CVE-2021-4336 · ITRS Group monitor-ninja
ITRS Group monitor-ninja scheduled_reports.php sql injection
Huawei
CVE-2021-46887 · Huawei EMUI
Lack of length check vulnerability in the HW_KEYMASTER module.
CVE-2022-48478 · Huawei HarmonyOS
The facial recognition TA of some products lacks memory length verification.
CVE-2022-48479 · Huawei HarmonyOS
The facial recognition TA of some products has the out-of-bounds memory read vulnerability.
mubarakalmehairbi
CVE-2023-33175 · mubarakalmehairbi ToUI
ToUI allows user-specific variables to be shared between users
Samsung Mobile
TIBCO Software Inc.
CVE-2023-26216 · TIBCO Software Inc. TIBCO EBX Add-ons
TIBCO EBX Add-ons Arbitrary File Write
SailPoint
CVE-2023-32217 · SailPoint IdentityIQ