by Kastro CVE-2023-27076 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 567 of 785
mitre
CVE-2023-27650 · mitre
An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parame…
CVE-2023-29478 · mitre
BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to almost anywhere on…
CVE-2023-27645 · mitre
An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and…
CVE-2023-27718 · mitre
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function.
CVE-2023-27719 · mitre
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function.
CVE-2023-27720 · mitre
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function.
CVE-2023-27021 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the formSetFirewallCfg function.
CVE-2023-27192 · mitre
An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the key_wifi_safe_net_check_url, K…
CVE-2023-27033 · mitre
Prestashop cdesigner v3.1.3 to v3.1.8 was discovered to contain a code injection vulnerability via the component CdesignerSaverotateModul…
CVE-2023-26068 · mitre
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
CVE-2022-41976 · mitre
An privilege escalation issue was discovered in Scada-LTS 2.7.1.1 build 2948559113 allows remote attackers, authenticated in the applicat…
CVE-2023-27178 · mitre
An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a craft…
CVE-2020-19802 · mitre
File Upload vulnerability found in Milken DoyoCMS v.2.3 allows a remote attacker to execute arbitrary code via the upload file type param…
CVE-2023-27014 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_46AC38 function.
CVE-2023-27015 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_4A75C0 function.
CVE-2023-27016 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the R7WebsSecurityHandler function.
CVE-2023-27017 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45DC58 function.
CVE-2023-27018 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_45EC1C function.
CVE-2023-27019 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the sub_458FBC function.
CVE-2023-27020 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the saveParentControlInfo function.
CVE-2023-29375 · mitre
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930…
CVE-2023-26063 · mitre
Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.
CVE-2023-26064 · mitre
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
CVE-2023-26065 · mitre
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
CVE-2023-26066 · mitre
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.
CVE-2023-26069 · mitre
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
CVE-2023-26070 · mitre
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
Unknown
SourceCodester
CVE-2023-1941 · SourceCodester Simple and Beautiful Shopping Cart System
SourceCodester Simple and Beautiful Shopping Cart System login.php sql injection
CVE-2023-1962 · SourceCodester Best Online News Portal
SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection
CVE-2023-1942 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store Avatar unrestricted upload
CVE-2023-1955 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store User Registration login.php sql injection
CVE-2023-1969 · SourceCodester Online Eyewear Shop
SourceCodester Online Eyewear Shop GET Parameter manage_stock.php sql injection
CVE-2023-1951 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store brand.php delete_brand sql injection
CVE-2023-1952 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store Product Search ?p=products sql injection
CVE-2023-1958 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store sql injection
CVE-2023-1940 · SourceCodester Simple and Beautiful Shopping Cart System
SourceCodester Simple and Beautiful Shopping Cart System delete_user_query.php sql injection
Apache Software Foundation
CVE-2023-28706 · Apache Software Foundation Apache Airflow Hive Provider
Apache Airflow Hive Provider Beeline Remote Command Execution
CVE-2023-27602 · Apache Software Foundation Apache Linkis
Apache Linkis publicsercice module unrestricted upload of file
CVE-2023-29215 · Apache Software Foundation Apache Linkis
Apache Linkis JDBC EngineCon has a deserialization command execution
CVE-2023-29216 · Apache Software Foundation Apache Linkis
Apache Linkis DatasourceManager module has a deserialization command execution
CVE-2023-27603 · Apache Software Foundation Apache Linkis
Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue
CVE-2023-27987 · Apache Software Foundation Apache Linkis
Apache Linkis gateway module token authentication bypass
Apple
PHPGurukul
CVE-2023-1949 · PHPGurukul BP Monitoring Management System
PHPGurukul BP Monitoring Management System Change Password change-password.php sql injection
CVE-2023-1950 · PHPGurukul BP Monitoring Management System
PHPGurukul BP Monitoring Management System Password Recovery password-recovery.php sql injection
CVE-2023-1963 · PHPGurukul Bank Locker Management System
PHPGurukul Bank Locker Management System Search index.php sql injection
CVE-2023-1964 · PHPGurukul Bank Locker Management System