by Kastro CVE-2023-30547 · patriksimek vm2
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 565 of 785
xwiki
CVE-2023-29509 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
CVE-2023-29210 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
CVE-2023-29211 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
CVE-2023-29212 · xwiki xwiki-platform
xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
CVE-2023-29214 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
CVE-2023-29209 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
CVE-2023-29511 · xwiki xwiki-platform
xwiki-platform-administration-ui vulnerable to privilege escalation
CVE-2023-30537 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
CVE-2023-29202 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
CVE-2023-29201 · xwiki xwiki-commons
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
CVE-2023-29507 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
CVE-2023-29207 · xwiki xwiki-platform
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
CVE-2023-29205 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
CVE-2023-29206 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
CVE-2023-29213 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-logging-ui Injection vulnerability
mitre
CVE-2022-34128 · mitre
The Cartography (aka positions) plugin before 6.0.1 for GLPI allows remote code execution via PHP code in the POST data to front/upload.php.
CVE-2020-29007 · mitre
The Score extension through 0.3.0 for MediaWiki has a remote code execution vulnerability due to improper sandboxing of the GNU LilyPond…
CVE-2021-28254 · mitre
A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.
CVE-2023-29665 · mitre
D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.
CVE-2023-27844 · mitre
SQL injection vulnerability found in PrestaShopleurlrewrite v.1.0 and before allow a remote attacker to gain privileges via the Dispatche…
CVE-2021-40506 · mitre
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11.
CVE-2021-40507 · mitre
An issue was discovered in the ALU unit of the OR1200 (aka OpenRISC 1200) processor 2011-09-10 through 2015-11-11.
fedora
janeczku
CVE-2022-2525 · janeczku janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
CVE-2023-2106 · janeczku janeczku/calibre-web
Weak Password Requirements in janeczku/calibre-web
SourceCodester
CVE-2023-2097 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System Master.php sql injection
CVE-2023-2130 · SourceCodester Purchase Order Management System
SourceCodester Purchase Order Management System GET Parameter view_details.php sql injection
CVE-2023-2092 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System view_service.php sql injection
CVE-2023-2093 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System Login.php sql injection
CVE-2023-2094 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System manage_mechanic.php sql injection
CVE-2023-2095 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System manage_category.php sql injection
CVE-2023-2096 · SourceCodester Vehicle Service Management System
SourceCodester Vehicle Service Management System manage_inventory.php sql injection
CVE-2023-2108 · SourceCodester Judging Management System
SourceCodester Judging Management System edit_contestant.php sql injection
liferay
Apache Software Foundation
CVE-2023-30771 · Apache Software Foundation Apache IoTDB Workbench
Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
CVE-2023-22946 · Apache Software Foundation Apache Spark
Apache Spark proxy-user privilege escalation from malicious configuration class
CVE-2023-24831 · Apache Software Foundation Apache IoTDB
Apache IoTDB grafana-connector Login Bypass Vulnerability
Campcodes
CVE-2023-2073 · Campcodes Online Traffic Offense Management System
Campcodes Online Traffic Offense Management System Login.php sql injection
CVE-2023-2074 · Campcodes Online Traffic Offense Management System
Campcodes Online Traffic Offense Management System Master.php sql injection
zanematthew
CVE-2023-2027 · zanematthew ZM Ajax Login & Register
ZM Ajax Login & Register <= 2.0.2 - Authentication Bypass
Electra
CVE-2023-24501 · Electra Electra Central AC unit
Electra Central AC unit – Hardcoded Credentials
ASUSTOR
Juniper Networks
CVE-2023-28962 · Juniper Networks Junos OS