by Kastro CVE-2023-27350 · PaperCut NG
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 564 of 785
PaperCut
xwiki
CVE-2023-29516 · xwiki xwiki-platform
Code injection from view right on XWiki.AttachmentSelector in xwiki-platform
CVE-2023-29524 · xwiki xwiki-platform
Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform
CVE-2023-29525 · xwiki xwiki-platform
Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform
CVE-2023-29510 · xwiki xwiki-platform
Code injection via unescaped translations in xwiki-platform
CVE-2023-29514 · xwiki xwiki-platform
Code injection in template provider administration in xwiki-platform
CVE-2023-29522 · xwiki xwiki-platform
Code injection from view right on XWiki.ClassSheet in xwiki-platform
CVE-2023-29523 · xwiki xwiki-platform
Code injection in display method used in user profiles in xwiki-platform
CVE-2023-29512 · xwiki xwiki-platform
Code injection in xwiki-platform-web-templates
CVE-2023-29518 · xwiki xwiki-platform
Code injection from view right using Invitation.InvitationCommon in xwiki-platform
CVE-2023-29519 · xwiki xwiki-platform
Code injection in org.xwiki.platform:xwiki-platform-attachment-ui
CVE-2023-29526 · xwiki xwiki-platform
Async and display macro allow displaying and interacting with any document in restricted mode
CVE-2023-29527 · xwiki xwiki-platform
Code injection from account through AWM view sheet in xwiki platform
CVE-2023-29528 · xwiki xwiki-commons
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
modoboa
CVE-2023-2227 · modoboa modoboa/modoboa
Improper Authorization in modoboa/modoboa
CVE-2023-2160 · modoboa modoboa/modoboa
Weak Password Requirements in modoboa/modoboa
mitre
CVE-2022-46640 · mitre
Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP requ…
CVE-2023-30076 · mitre
Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub…
CVE-2023-22621 · mitre
Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the se…
CVE-2021-33970 · mitre
Buffer Overflow vulnerability in Qihoo 360 Chrome v13.0.2170.0 allows attacker to escalate priveleges.
CVE-2021-33975 · mitre
Buffer Overflow vulnerability in Qihoo 360 Total Security v10.8.0.1060 and v10.8.0.1213 allows attacker to escalate privileges.
CVE-2021-33972 · mitre
Buffer Overflow vulnerability in Qihoo 360 Safe Browser v13.0.2170.0 allows attacker to escalate priveleges.
CVE-2023-29924 · mitre
PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
CVE-2023-29926 · mitre
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
CVE-2022-29604 · mitre
An issue was discovered in ONOS 2.5.1.
CVE-2022-29606 · mitre
An issue was discovered in ONOS 2.5.1.
CVE-2023-26556 · mitre
io.finnet tss-lib before 2.0.0 can leak a secret key via a timing side-channel attack because it relies on the scalar-multiplication impl…
CVE-2023-28863 · mitre
AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity.
SourceCodester
CVE-2023-2152 · SourceCodester Student Study Center Desk Management System
SourceCodester Student Study Center Desk Management System index.php file inclusion
CVE-2023-2151 · SourceCodester Student Study Center Desk Management System
SourceCodester Student Study Center Desk Management System manage_student.php sql injection
Campcodes
CVE-2023-2148 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System view_curriculum.php sql injection
CVE-2023-2149 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System manage_user.php sql injection
CVE-2023-2144 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System view_department.php sql injection
CVE-2023-2145 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System projects_per_curriculum.php sql injection
CVE-2023-2146 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System Master.php sql injection
CVE-2023-2147 · Campcodes Online Thesis Archiving System
Campcodes Online Thesis Archiving System view_details.php sql injection
nuxtlabs
CVE-2023-2138 · nuxtlabs nuxtlabs/github-module
Use of Hard-coded Credentials in nuxtlabs/github-module
vmware
Schneider Electric
CVE-2023-29411 · Schneider Electric APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, lead…
CVE-2023-25549 · Schneider Electric StruxureWare Data Center Expert
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using…
CVE-2023-25550 · Schneider Electric StruxureWare Data Center Expert
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostn…
CVE-2023-28004 · Schneider Electric PowerLogic HDPM6000
A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial o…
CVE-2023-29412 · Schneider Electric APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause…
shoppingflux
CVE-2023-28839 · shoppingflux module-prestashop