by Kastro CVE-2023-31689 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 557 of 785
mitre
CVE-2023-31729 · mitre
TOTOLINK A3300R v17.0.0cu.557 is vulnerable to Command Injection via /cgi-bin/cstecgi.cgi.
CVE-2023-27217 · mitre
A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 al…
CVE-2023-33294 · mitre
An issue was discovered in KaiOS 3.0 before 3.1.
CVE-2023-30333 · mitre
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arb…
CVE-2023-29985 · mitre
Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability.
CVE-2023-31707 · mitre
SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php.
code-projects
CVE-2023-2774 · code-projects Bus Dispatch and Information System
code-projects Bus Dispatch and Information System view_branch.php sql injection
CVE-2023-2776 · code-projects Simple Photo Gallery
code-projects Simple Photo Gallery unrestricted upload
gpac
Cisco
CVE-2023-20159 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20160 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20161 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20189 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20156 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20157 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20158 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-20162 · Cisco Cisco Small Business Smart and Managed Switches
Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
CVE-2023-28753 · Facebook netconsd
netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function.
CVE-2023-30470 · Facebook Hermes
A use-after-free related to unsound inference in the bytecode generation when optimizations are enabled for Hermes prior to commit da8990…
CVE-2023-23556 · Facebook Hermes
An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a mali…
CVE-2023-23557 · Facebook Hermes
An error in Hermes' algorithm for copying objects properties prior to commit a00d237346894c6067a594983be6634f4168c9ad could be used by a…
CVE-2023-25933 · Facebook Hermes
A type confusion bug in TypedArray prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could have been used by a malicious attacker…
CVE-2023-28081 · Facebook Hermes
A bytecode optimization bug in Hermes prior to commit e6ed9c1a4b02dc219de1648f44cd808a56171b81 could be used to cause an use-after-free a…
vibethemes
CVE-2023-2704 · vibethemes BP Social Connect
BP Social Connect <= 1.5 - Authentication Bypass
Apache Software Foundation
CVE-2023-31062 · Apache Software Foundation Apache InLong
Apache InLong: Privilege escalation vulnerability for InLong
CVE-2023-31098 · Apache Software Foundation Apache InLong
Apache InLong: Weak Password Implementation in InLong
CVE-2023-31066 · Apache Software Foundation Apache InLong
Apache InLong: Insecure direct object references for inlong sources
CVE-2023-31065 · Apache Software Foundation Apache InLong
Apache InLong: Insufficient Session Expiration in InLong
IBM
CVE-2023-32336 · IBM InfoSphere Information Server
IBM InfoSphere Information Server code execution
CVE-2022-47984 · IBM InfoSphere Information Server
IBM InfoSphere Information Server SQL injection
Unknown
Western Digital
CVE-2022-36327 · Western Digital My Cloud Home and My Cloud Home Duo
Path traversal vulnerability leading to an arbitrary file write in Western Digital devices
Johnson Controls
CVE-2023-2024 · Johnson Controls OpenBlue Enterprise Manager Data Collector
Improper Authentication for OpenBlue Enterprise Manager Data Collector
wclovers
CVE-2023-2276 · wclovers WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Teltonika
CVE-2023-2586 · Teltonika Remote Management System
Teltonika’s Remote Management System versions 4.14.0 is vulnerable to an unauthorized attacker registering previously unregistered device…
CVE-2023-32347 · Teltonika Remote Management System
Teltonika’s Remote Management System versions prior to 4.10.0 use device serial numbers and MAC addresses to identify devices from the us…
Snap One
CVE-2023-31241 · Snap One OvrC Cloud
Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.
CVE-2023-31240 · Snap One OvrC Cloud
Snap One OvrC Pro versions prior to 7.2 have their own locally running web server accessible both from the local network and remotely.
CVE-2023-28386 · Snap One OvrC Cloud
Snap One OvrC Pro devices versions 7.2 and prior do not validate firmware updates correctly.
SourceCodester
CVE-2023-2823 · SourceCodester Class Scheduling System
SourceCodester Class Scheduling System GET Parameter edit_subject.php sql injection
CVE-2023-2815 · SourceCodester Online Jewelry Store
SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection
Schneider Electric
Eclipse Foundation
ThingsForRestaurants
CVE-2022-44739 · ThingsForRestaurants Quick Restaurant Reservations