by Kastro CVE-2023-1650 · Unknown AI ChatBot
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 560 of 785
Unknown
CVE-2022-4118 · Unknown Bitcoin / AltCoin Payment Gateway for WooCommerce & Multivendor store / shop
Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi
mitre
CVE-2023-29693 · mitre
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function set_tftp_upgrad.
CVE-2023-29696 · mitre
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function version_set.
CVE-2023-30092 · mitre
SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter.
CVE-2023-30018 · mitre
Judging Management System v1.0 is vulnerable to SQL Injection.
CVE-2023-29944 · mitre
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution.
CVE-2023-30185 · mitre
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentService…
xwiki
CVE-2023-31126 · xwiki xwiki-commons
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
CVE-2023-32071 · xwiki xwiki-platform
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
CVE-2023-32069 · xwiki xwiki-platform
XWiki Platform privilege escalation (PR)/RCE from account through class sheet
Microsoft
CVE-2023-24941 · Microsoft Windows Server 2019
Windows Network File System Remote Code Execution Vulnerability
CVE-2023-24943 · Microsoft Windows 10 Version 1809
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Apache Software Foundation
CVE-2023-25754 · Apache Software Foundation Apache Airflow
Apache Airflow: Privilege escalation using airflow logs
CVE-2023-31039 · Apache Software Foundation Apache bRPC
Apache bRPC: ServerOptions.pid_file may cause arbitrary code execution
Hewlett Packard Enterprise (HPE)
CVE-2023-22779 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22780 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22781 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22782 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22783 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22784 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22785 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
CVE-2023-22786 · Hewlett Packard Enterprise (HPE) Aruba Access Points running InstantOS and ArubaOS 10
Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
Apple
Siemens
CVE-2023-27407 · Siemens SCALANCE LPE9403
A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1).
CVE-2023-30898 · Siemens Siveillance Video 2020 R2
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versi…
CVE-2023-30899 · Siemens Siveillance Video 2020 R2
A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versi…
SourceCodester
CVE-2023-2594 · SourceCodester Food Ordering Management System
SourceCodester Food Ordering Management System Registration sql injection
CVE-2023-2595 · SourceCodester Billing Management System
SourceCodester Billing Management System POST Parameter ajax_service.php sql injection
CVE-2023-2596 · SourceCodester Online Reviewer System
SourceCodester Online Reviewer System GET Parameter user-update.php sql injection
AMD
CVE-2023-20520 · AMD 1st Gen AMD EPYC™
Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overr…
CVE-2021-26379 · AMD 2nd Gen AMD EPYC™
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to…
CVE-2021-46753 · AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker with a malicious…
CVE-2021-46754 · AMD Ryzen™ 2000 series Desktop Processors “Raven Ridge” AM4
Insufficient input validation in the ASP (AMD Secure Processor) bootloader may allow an attacker with a compromised Uapp or ABL to coerce…
CVE-2021-46762 · AMD 2nd Gen AMD EPYC™
Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial o…
Rockwell Automation
CVE-2023-29460 · Rockwell Automation Arena Simulation
Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
CVE-2023-29461 · Rockwell Automation Arena Simulation
Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
contiki-ng
CVE-2023-31129 · contiki-ng contiki-ng
Contiki-NG missing NULL pointer check in IPv6 neighbor discovery
hackerone
mage-ai
EasyTor Applications
CVE-2023-31182 · EasyTor Applications EasyTor Applications
EasyTor Applications – Authorization Bypass
effectindex
SAP_SE
CVE-2023-28762 · SAP_SE SAP BusinessObjects Intelligence Platform
Information Disclosure in SAP BusinessObjects Intelligence Platform
CVE-2023-30744 · SAP_SE SAP AS NetWeaver JAVA
Improper access control during application start-up in SAP AS NetWeaver JAVA.
CVE-2023-32113 · SAP_SE SAP GUI for Windows