by Kastro CVE-2023-29017 · patriksimek vm2
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 568 of 785
patriksimek
sidekiq
CVE-2023-1892 · sidekiq sidekiq/sidekiq
Cross-site Scripting (XSS) - Reflected in sidekiq/sidekiq
microweber
CVE-2023-1877 · microweber microweber/microweber
Command Injection in microweber/microweber
mitre
CVE-2023-26848 · mitre
TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the org parameter at setting/delS…
CVE-2023-26978 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pppoeAcName parameter at /sett…
CVE-2022-31890 · mitre
SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae…
CVE-2023-24720 · mitre
An arbitrary file upload vulnerability in readium-js v0.32.0 allows attackers to execute arbitrary code via uploading a crafted EPUB file.
CVE-2023-25330 · mitre
A SQL injection vulnerability in Mybatis plus below 3.5.3.1 allows remote attackers to execute arbitrary SQL commands via the tenant ID v…
CVE-2023-29374 · mitre
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec…
CVE-2023-24797 · mitre
D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function.
CVE-2023-24800 · mitre
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function.
CVE-2023-28500 · mitre
A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to…
CVE-2023-24798 · mitre
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function.
CVE-2023-24799 · mitre
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function.
CVE-2023-27012 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function.
CVE-2023-27013 · mitre
Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function.
CVE-2023-25218 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function.
CVE-2023-25220 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function.
CVE-2023-25210 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function.
CVE-2023-25211 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function.
CVE-2023-25212 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function.
CVE-2023-25213 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function.
CVE-2023-25214 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function.
CVE-2023-25215 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function.
CVE-2023-25216 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function.
CVE-2023-25217 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function.
CVE-2023-25219 · mitre
Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function.
CVE-2023-29473 · mitre
webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated at…
CVE-2023-29474 · mitre
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated att…
CVE-2023-29475 · mitre
inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated att…
GitLab
SourceCodester
CVE-2023-1849 · SourceCodester Online Payroll System
SourceCodester Online Payroll System cashadvance_row.php sql injection
CVE-2023-1854 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System session expiration
CVE-2023-1845 · SourceCodester Online Payroll System
SourceCodester Online Payroll System employee_row.php sql injection
CVE-2023-1846 · SourceCodester Online Payroll System
SourceCodester Online Payroll System deduction_row.php sql injection
CVE-2023-1847 · SourceCodester Online Payroll System
SourceCodester Online Payroll System attendance.php sql injection
CVE-2023-1848 · SourceCodester Online Payroll System
SourceCodester Online Payroll System attendance_row.php sql injection
CVE-2023-1850 · SourceCodester Online Payroll System
SourceCodester Online Payroll System login.php sql injection
CVE-2023-1856 · SourceCodester Air Cargo Management System
SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection
CVE-2023-1908 · SourceCodester Simple Mobile Comparison Website
SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection
Cisco
CVE-2023-20073 · Cisco Cisco Small Business RV Series Router Firmware
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability
firefly-iii
CVE-2023-1788 · firefly-iii firefly-iii/firefly-iii
Insufficient Session Expiration in firefly-iii/firefly-iii
Go standard library
CVE-2023-24538 · Go standard library html/template
Backticks not treated as string delimiters in html/template
wclovers
CVE-2022-4939 · wclovers WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
WCFM Membership <= 2.10.0 - Unauthenticated Privilege Escalation
HashiCorp
thorsten
CVE-2023-1886 · thorsten thorsten/phpmyfaq
Authentication Bypass by Capture-replay in thorsten/phpmyfaq
glpi-project
ABB
CVE-2023-0580 · ABB My Control System (on-premise)