by Kastro CVE-2023-29809 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 559 of 785
mitre
CVE-2023-30194 · mitre
Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook().
CVE-2023-31475 · mitre
An issue was discovered on GL.iNet devices before 3.216.
CVE-2023-30192 · mitre
Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().
CVE-2023-31498 · mitre
A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary c…
CVE-2023-30246 · mitre
SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestan…
CVE-2023-31471 · mitre
An issue was discovered on GL.iNet devices before 3.216.
CVE-2023-29863 · mitre
Medical Systems Co.
CVE-2023-27823 · mitre
An authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration console without valid credentials.
CVE-2022-47129 · mitre
PHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.
CVE-2023-30353 · mitre
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 allows unauthenticated remote code execution via an XML document.
CVE-2023-27238 · mitre
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
CVE-2023-30352 · mitre
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 was discovered to contain a hard-coded default password for the RTSP feed.
CVE-2023-32569 · mitre
An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2.800 and 8.x before 8.0.410.
CVE-2023-30354 · mitre
Shenzen Tenda Technology IP Camera CP3 V11.10.00.2211041355 does not defend against physical access to U-Boot via the UART: the Wi-Fi pas…
Weaver
SourceCodester
CVE-2023-2656 · SourceCodester AC Repair and Services System
SourceCodester AC Repair and Services System sql injection
CVE-2023-2660 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store view_categories.php sql injection
CVE-2023-2642 · SourceCodester Online Exam System
SourceCodester Online Exam System GET Parameter updateCourse.php sql injection
CVE-2023-2641 · SourceCodester Online Internship Management System
SourceCodester Online Internship Management System POST Parameter login.php sql injection
CVE-2023-2658 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store products.php sql injection
CVE-2023-2659 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store view_product.php sql injection
CVE-2023-2661 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store Master.php sql injection
CVE-2023-2619 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection
CVE-2023-2643 · SourceCodester File Tracker Manager System
SourceCodester File Tracker Manager System POST Parameter update_password.php sql injection
CVE-2023-2652 · SourceCodester Lost and Found Information System
SourceCodester Lost and Found Information System sql injection
CVE-2023-2653 · SourceCodester Lost and Found Information System
SourceCodester Lost and Found Information System index.php sql injection
linagora
xwiki
Go standard library
CVE-2023-24540 · Go standard library html/template
Improper handling of JavaScript whitespace in html/template
Western Digital
CVE-2022-29842 · Western Digital My Cloud OS 5
Command Injection Vulnerability in Western Digital My Cloud devices
CVE-2022-29841 · Western Digital My Cloud OS 5
OS Command Injection vulnerability in Western Digital My Cloud devices
Canon Inc.
CVE-2023-0851 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow a…
CVE-2023-0852 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which…
CVE-2023-0853 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may a…
CVE-2023-0854 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers…
CVE-2023-0855 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow…
CVE-2023-0856 · Canon Inc. Canon Office/Small Office Multifunction Printers and Laser Printers
Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an a…
netapp
Rockwell Automation
CVE-2023-1834 · Rockwell Automation Kinetix 5500 EtherNet/IP Servo Drive
Rockwell Automation Kinetix 5500 Vulnerable to Open Port Exploitation
AMD
CVE-2021-46760 · AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT
A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory ac…
CVE-2021-46756 · AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attacker with a malicio…
Schweitzer Engineering Laboratories
CVE-2023-31148 · Schweitzer Engineering Laboratories SEL-3505
Improper Input Validation in Web Interface
CVE-2023-31149 · Schweitzer Engineering Laboratories SEL-3505
Improper Input Validation in Web Interface
vyperlang
IBM
CVE-2023-27554 · IBM WebSphere Application Server