by Kastro CVE-2022-43939 · Hitachi Vantara Pentaho Business Analytics Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,249 matching vulnerabilities · Page 569 of 785
Hitachi Vantara
Sophos
CVE-2023-1671 · Sophos Sophos Web Appliance
Sophos Web Appliance Command Injection Vulnerability
mitre
CVE-2023-26822 · mitre
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
CVE-2023-26921 · mitre
OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.
CVE-2020-19692 · mitre
Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attacker to execute arbitrary code via the njs_module_read in t…
CVE-2020-19695 · mitre
Buffer Overflow found in Nginx NJS allows a remote attacker to execute arbitrary code via the njs_object_property parameter of the njs/nj…
CVE-2020-20913 · mitre
SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter.
CVE-2020-20914 · mitre
SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter.
CVE-2020-20915 · mitre
SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysS…
CVE-2020-19693 · mitre
An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:js…
CVE-2023-26866 · mitre
GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulne…
CVE-2021-28235 · mitre
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function.
CVE-2023-26750 · mitre
SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code…
CVE-2020-29312 · mitre
An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function.
CVE-2021-31707 · mitre
Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.
CVE-2023-28613 · mitre
An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300.
CVE-2020-19279 · mitre
Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.
CVE-2022-38922 · mitre
BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settin…
CVE-2022-38923 · mitre
BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-…
CVE-2020-21487 · mitre
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via…
envoyproxy
CVE-2023-27491 · envoyproxy envoy
Envoy forwards invalid Http2/Http3 downstream headers
CVE-2023-27487 · envoyproxy envoy
Envoy client may fake the header `x-envoy-original-path`
CVE-2023-27493 · envoyproxy envoy
Envoy doesn't escape HTTP header values
CVE-2023-27488 · envoyproxy envoy
Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.
SourceCodester
CVE-2023-1826 · SourceCodester Online Computer and Laptop Store
SourceCodester Online Computer and Laptop Store index.php unrestricted upload
CVE-2023-1785 · SourceCodester Earnings and Expense Tracker App
SourceCodester Earnings and Expense Tracker App manage_user.php sql injection
CVE-2023-1792 · SourceCodester Simple Mobile Comparison Website
SourceCodester Simple Mobile Comparison Website GET Parameter manage_field.php sql injection
CVE-2023-1793 · SourceCodester Police Crime Record Management System
SourceCodester Police Crime Record Management System GET Parameter assigncase.php sql injection
CVE-2023-1827 · SourceCodester Centralized Covid Vaccination Records System
SourceCodester Centralized Covid Vaccination Records System GET Parameter manage_location.php sql injection
CVE-2023-1791 · SourceCodester Simple Task Allocation System
SourceCodester Simple Task Allocation System manage_user.php sql injection
sjqzhang
CVE-2023-1800 · sjqzhang go-fastdfs
sjqzhang go-fastdfs File Upload uploa upload path traversal
snyk
firefly-iii
CVE-2023-1789 · firefly-iii firefly-iii/firefly-iii
Improper Input Validation in firefly-iii/firefly-iii
VulDB
Fernus Informatics
CVE-2023-1728 · Fernus Informatics LMS
Unrestricted Upload of File with Dangerous Type in Fernus LMS
202ecommerce
Qualcomm, Inc.
CVE-2022-25678 · Qualcomm, Inc. Snapdragon
Buffer Copy Without Checking Size of Input in MODEM
CVE-2022-25740 · Qualcomm, Inc. Snapdragon
Buffer Copy Without Checking Size of Input in MODEM
CVE-2022-25745 · Qualcomm, Inc. Snapdragon
Always Incorrect Control Flow Implementation in MODEM
CVE-2022-33211 · Qualcomm, Inc. Snapdragon
Improper Input Validation in MODEM
CVE-2022-33259 · Qualcomm, Inc. Snapdragon
Buffer copy without checking the size of input in Modem
CVE-2022-33231 · Qualcomm, Inc. Snapdragon
Double free in Core
CVE-2022-33269 · Qualcomm, Inc. Snapdragon
Integer overflow or wraparound in Core
CVE-2022-33288 · Qualcomm, Inc. Snapdragon