by Kastro CVE-2023-2356 · mlflow mlflow/mlflow
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 562 of 785
mlflow
mitre
CVE-2023-30349 · mitre
JFinal CMS v5.1.0 was discovered to contain a remote code execution (RCE) vulnerability via the ActionEnter function.
CVE-2022-47758 · mitre
Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.
CVE-2023-31470 · mitre
SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain funct…
CVE-2023-26781 · mitre
SQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center ->Reader Comments ->Search.
CVE-2023-26813 · mitre
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS…
CVE-2023-30363 · mitre
vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts.
CVE-2023-30280 · mitre
Buffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execut…
CVE-2023-29635 · mitre
File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to fun…
CVE-2023-30211 · mitre
OURPHP <= 7.2.0 is vulnerable to SQL Injection.
CVE-2022-35898 · mitre
OpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password operation.
CVE-2022-41397 · mitre
The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard-coded 40-byte blowfish key ("LandlordPas…
CVE-2022-41400 · mitre
Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user passwords and SQL connection strings stored in I…
tritonmc
SourceCodester
CVE-2023-2347 · SourceCodester Service Provider Management System
SourceCodester Service Provider Management System manage_service.php sql injection
CVE-2023-2371 · SourceCodester Online DJ Management System
SourceCodester Online DJ Management System GET Parameter view_details.php sql injection
CVE-2023-2367 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System manage_academic.php sql injection
CVE-2023-2369 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System manage_restriction.php sql injection
CVE-2023-2344 · SourceCodester Service Provider Management System
SourceCodester Service Provider Management System HTTP POST Request sql injection
CVE-2023-2346 · SourceCodester Service Provider Management System
SourceCodester Service Provider Management System view_inquiry.php sql injection
CVE-2023-2348 · SourceCodester Service Provider Management System
SourceCodester Service Provider Management System manage_user.php sql injection
CVE-2023-2363 · SourceCodester Resort Reservation System
SourceCodester Resort Reservation System view_room.php sql injection
CVE-2023-2366 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System sql injection
CVE-2023-2370 · SourceCodester Online DJ Management System
SourceCodester Online DJ Management System GET Parameter manage_event.php sql injection
CVE-2023-2365 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System sql injection
CVE-2023-2368 · SourceCodester Faculty Evaluation System
SourceCodester Faculty Evaluation System sql injection
CVE-2023-2345 · SourceCodester Service Provider Management System
SourceCodester Service Provider Management System improper authorization
GoogleCloudPlatform
Zyxel
Illumina
CVE-2023-1968 · Illumina iScan Control Software
CVE-2023-1968
CVE-2023-1966 · Illumina iScan Control Software
CVE-2023-1966
HP Inc.
CVE-2023-27972 · HP Inc. HP LaserJet Pro
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Remote Code Execution.
CVE-2023-27973 · HP Inc. HP LaserJet Pro
Certain HP LaserJet Pro print products are potentially vulnerable to Heap Overflow and/or Remote Code Execution.
CVE-2023-27971 · HP Inc. HP LaserJet Pro
Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Elevation of Privilege.
microsoft
CVE-2023-30846 · microsoft typed-rest-client
typed-rest-client vulnerable to potential leak of authentication data to 3rd parties
GajShield
CVE-2023-1778 · GajShield Data Security Firewall
Default Credential Vulnerability in GajShield Data Security Firewall
Milesight
CVE-2023-30466 · Milesight NVR MS-Nxxxx-xxG
Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)
CVE-2023-30467 · Milesight NVR MS-Nxxxx-xxG
Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)
aEnrich
cozmoslabs
CVE-2023-2297 · cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
TIBCO Software Inc.
CVE-2023-29268 · TIBCO Software Inc. TIBCO Spotfire Statistics Services