by Kastro CVE-2023-2564 · sbs20 sbs20/scanservjs
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 561 of 785
sbs20
mitre
CVE-2023-29778 · mitre
GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread.
CVE-2023-30013 · mitre
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg.
CVE-2023-29827 · mitre
ejs v3.1.9 is vulnerable to server-side template injection.
CVE-2022-47878 · mitre
Incorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to spec…
CVE-2022-47876 · mitre
The integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.
CVE-2022-47877 · mitre
A Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML i…
CVE-2023-30053 · mitre
TOTOLINK A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection.
CVE-2023-30054 · mitre
TOTOLINK A7100RU V7.4cu.2313_B20191024 has a Command Injection vulnerability.
CVE-2023-30328 · mitre
An issue in the helper tool of Mailbutler GmbH Shimo VPN Client for macOS v5.0.4 allows attackers to bypass authentication via PID re-use.
CVE-2023-30331 · mitre
An issue in the render function of beetl v3.15.0 allows attackers to execute server-side template injection (SSTI) via a crafted payload.
CVE-2020-23966 · mitre
SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a cra…
CVE-2023-30135 · mitre
Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbU…
CVE-2023-31047 · mitre
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to up…
CVE-2023-23059 · mitre
An issue was discovered in GeoVision GV-Edge Recording Manager 2.2.3.0 for windows, which contains improper permissions within the defaul…
CVE-2023-26089 · mitre
European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing.
CVE-2022-47757 · mitre
In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file in…
CVE-2023-30122 · mitre
An arbitrary file upload vulnerability in the component /admin/ajax.php?action=save_menu of Online Food Ordering System v2.0 allows attac…
CVE-2023-29856 · mitre
D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow.
CVE-2023-30077 · mitre
Judging Management System v1.0 by oretnom23 was discovered to vulnerable to SQL injection via /php-jms/review_result.php?mainevent_id=, m…
CVE-2023-30090 · mitre
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php.
CVE-2023-30203 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_shee…
CVE-2023-30264 · mitre
CLTPHP <=6.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via application/admin/controller/Template.php:update.
CVE-2023-30268 · mitre
CLTPHP <=6.0 is vulnerable to Improper Input Validation.
CVE-2023-30242 · mitre
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.
CVE-2023-30204 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /php-jms/edit_judge.…
GitLab
Acronis
CVE-2022-3405 · Acronis Acronis Cyber Protect 15
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.
CVE-2022-30995 · Acronis Acronis Cyber Protect 15
Sensitive information disclosure due to improper authentication.
azuracast
CVE-2023-2531 · azuracast azuracast/azuracast
Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast
Cisco
CVE-2023-20126 · Cisco Cisco Small Business IP Phones
Cisco SPA112 2-Port Phone Adapters Remote Command Execution Vulnerability
Easy Digital Downloads
CVE-2023-30869 · Easy Digital Downloads Easy Digital Downloads
WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation
Caton
CVE-2023-2520 · Caton Prime
Caton Prime Ping command injection
CVE-2023-2519 · Caton CTP Relay Server
Caton CTP Relay Server API login sql injection
Apache Software Foundation
CVE-2022-45802 · Apache Software Foundation Apache StreamPark (incubating)
Apache StreamPark (incubating): Upload any file to any directory
CVE-2022-46365 · Apache Software Foundation Apache StreamPark (incubating)
Apache StreamPark (incubating): Logic error causing any account reset
Elastic
SUSE
AgilePoint
Apple
Samsung Mobile
CVE-2023-21494 · Samsung Mobile Samsung Mobile Devices
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows rem…
CVE-2023-21503 · Samsung Mobile Samsung Mobile Devices
Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote a…
CVE-2023-21504 · Samsung Mobile Samsung Mobile Devices
Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attack…
SourceCodester
CVE-2023-2451 · SourceCodester Online DJ Management System