by Kastro CVE-2023-33009 · Zyxel ATP series firmware
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 556 of 785
Zyxel
Apache Software Foundation
CVE-2023-33246 · Apache Software Foundation Apache RocketMQ
Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
Barracuda
CVE-2023-2868 · Barracuda Barracuda Email Security Gateway
Remote Code injection in Barracuda Email Security Gateway
mitre
CVE-2023-29919 · mitre
SolarView Compact <= 6.0 is vulnerable to Insecure Permissions.
CVE-2023-33362 · mitre
Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
CVE-2023-33338 · mitre
Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter.
CVE-2023-27068 · mitre
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via Validati…
CVE-2023-23298 · mitre
The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which…
CVE-2023-23300 · mitre
The `Toybox.Cryptography.Cipher.initialize` API method in CIQ API version 3.0.0 through 4.1.7 does not validate its parameters, which can…
CVE-2023-23302 · mitre
The `Toybox.GenericChannel.setDeviceConfig` API method in CIQ API version 1.2.0 through 4.1.7 does not validate its parameter, which can…
CVE-2023-23305 · mitre
The GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 is vulnerable to various buffer overflows when loading binary resources.
CVE-2023-23306 · mitre
The `Toybox.Ant.BurstPayload.add` API method in CIQ API version 2.2.0 through 4.1.7 suffers from a type confusion vulnreability, which ca…
CVE-2023-29721 · mitre
SofaWiki <= 3.8.9 has a file upload vulnerability that leads to command execution.
CVE-2023-23301 · mitre
The `news` MonkeyC operation code in CIQ API version 1.0.0 through 4.1.7 fails to check that string resources are not extending past the…
CVE-2023-33361 · mitre
Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.
CVE-2023-23303 · mitre
The `Toybox.Ant.GenericChannel.enableEncryption` API method in CIQ API version 3.2.0 through 4.1.7 does not validate its parameter, which…
CVE-2023-31752 · mitre
SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.
CVE-2023-23304 · mitre
The GarminOS TVM component in CIQ API version 2.1.0 through 4.1.7 allows applications with a specially crafted head section to use the `T…
CVE-2020-20012 · mitre
WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.
CVE-2023-31457 · mitre
A vulnerability in the Headquarters server component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an…
CVE-2023-31458 · mitre
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect versions 19.3 SP2 (22.24.1500.0) and earlier could allow an unauth…
CVE-2023-31814 · mitre
D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.
CVE-2023-33278 · mitre
In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP req…
CVE-2023-33280 · mitre
In the Store Commander scquickaccounting module for PrestaShop through 3.7.3, multiple sensitive SQL calls can be executed with a trivial…
CVE-2023-33279 · mitre
In the Store Commander scfixmyprestashop module through 2023-05-09 for PrestaShop, sensitive SQL calls can be executed with a trivial HTT…
CVE-2023-33796 · mitre
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access t…
inspireui
CVE-2023-2732 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 3.9.2 - Authentication Bypass
CVE-2023-2734 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 3.9.1 - Authentication Bypass
CVE-2023-2733 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 3.9.0 - Authentication Bypass
Mitsubishi Electric Corporation
CVE-2023-1424 · Mitsubishi Electric Corporation MELSEC iQ-F Series FX5U-32MT/ES
Denial-of-Service and Remote Code Execution Vulnerability in MELSEC Series CPU module
Monkey Wrench Inc.
CVE-2023-28413 · Monkey Wrench Inc. Snow Monkey Forms
Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attacker to obtain sen…
CVE-2023-28408 · Monkey Wrench Inc. MW WP Form
Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to alter the website…
CVE-2023-28409 · Monkey Wrench Inc. MW WP Form
Unrestricted upload of file with dangerous type exists in MW WP Form versions v4.4.2 and earlier, which may allow a remote unauthenticate…
xerial
MicroEngine Inc.
CVE-2023-27507 · MicroEngine Inc. MicroEngine Mailform
MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability.
CVE-2023-27397 · MicroEngine Inc. MicroEngine Mailform
Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8.
Dataprobe, Inc.
CVE-2022-46658 · Dataprobe, Inc. Dataprobe iBoot-PDU FW
CVE-2022-46658
CVE-2022-46738 · Dataprobe, Inc. Dataprobe iBoot-PDU FW
CVE-2022-46738
T&D Corporation and ESPEC MIC CORP.
CVE-2023-27388 · T&D Corporation and ESPEC MIC CORP. T&D Corporation and ESPEC MIC CORP. data logger products
Improper authentication vulnerability in T&D Corporation and ESPEC MIC CORP.
Kubernetes
Adam Retail Automation Systems
CVE-2023-1508 · Adam Retail Automation Systems Mobilmen Terminal Software
SQLi in AdamPOS's Mobilmen Terminal Software
CBOT
Ipekyolu Software
CVE-2023-2045 · Ipekyolu Software Auto Damage Tracking Software
SQLi in Ipekyolu Software's Auto Damage Tracking Software
SourceCodester
CVE-2023-2865 · SourceCodester Theme Park Ticketing System
SourceCodester Theme Park Ticketing System GET Parameter print_ticket.php sql injection
WORKS MOBILE Japan Corp.
CVE-2023-25953 · WORKS MOBILE Japan Corp. Drive Explorer for macOS