by Kastro CVE-2022-45460 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 571 of 786
mitre
CVE-2023-27847 · mitre
SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategory…
CVE-2023-27229 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/set…
CVE-2023-27231 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/s…
CVE-2023-27232 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wanStrategy parameter at /sett…
CVE-2023-27821 · mitre
Databasir v1.0.7 was discovered to contain a remote code execution (RCE) vulnerability via the mockDataScript parameter.
CVE-2022-46387 · mitre
ConEmu through 220807 and Cmder before 1.3.21 report the title of the terminal, including control characters, which allows an attacker to…
CVE-2023-26959 · mitre
Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter.
CVE-2023-28883 · mitre
In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint.
SourceCodester
CVE-2023-1675 · SourceCodester School Registration and Fee System
SourceCodester School Registration and Fee System GET Parameter edit_stud.php sql injection
CVE-2023-1666 · SourceCodester Automatic Question Paper Generator System
SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection
CVE-2023-1674 · SourceCodester School Registration and Fee System
SourceCodester School Registration and Fee System POST Parameter login.php sql injection
Delta Electronics
CVE-2023-1133 · Delta Electronics InfraSuite Device Master
CVE-2023-1133
CVE-2023-1140 · Delta Electronics InfraSuite Device Master
CVE-2023-1140
CVE-2023-1142 · Delta Electronics InfraSuite Device Master
CVE-2023-1142
CVE-2023-1136 · Delta Electronics InfraSuite Device Master
CVE-2023-1136
Ivanti
CVE-2022-36971 · Ivanti Avalanche
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36974 · Ivanti Avalanche
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36972 · Ivanti Avalanche
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36975 · Ivanti Avalanche
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36976 · Ivanti Avalanche
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36977 · Ivanti Avalanche
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36978 · Ivanti Avalanche
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.
CVE-2022-36973 · Ivanti Avalanche
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.
ProPump and Controls, Inc.
CVE-2023-27394 · ProPump and Controls, Inc. Osprey Pump Controller
CVE-2023-27394
CVE-2023-27886 · ProPump and Controls, Inc. Osprey Pump Controller
CVE-2023-27886
CVE-2023-28712 · ProPump and Controls, Inc. Osprey Pump Controller
CVE-2023-28712
CVE-2023-28398 · ProPump and Controls, Inc. Osprey Pump Controller
CVE-2023-28398
CVE-2023-28654 · ProPump and Controls, Inc. Osprey Pump Controller
CVE-2023-28654
Netatalk
CVE-2022-0194 · Netatalk Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
CVE-2022-23121 · Netatalk Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
CVE-2022-23122 · Netatalk Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
CVE-2022-23125 · Netatalk Netatalk
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.
CVE-2022-23123 · Netatalk Netatalk
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.
CVE-2022-23124 · Netatalk Netatalk
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Netatalk.
Canon
EnterpriseDT
Kepware
CVE-2022-2825 · Kepware KEPServerEX
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.
CVE-2022-2848 · Kepware KEPServerEX
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0.
Apache Software Foundation
CVE-2023-28326 · Apache Software Foundation Apache OpenMeetings
Apache OpenMeetings: allows user impersonation
kivikakk
Hitachi Energy
CVE-2022-3686 · Hitachi Energy SDM600
SDM600 API permission check
CVE-2022-3682 · Hitachi Energy SDM600
SDM600 file permission validation
Keysight Technologies
CVE-2023-1399 · Keysight Technologies N6854A Geolocation Server
N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate…
IBM
HCL Software
CVE-2022-42447 · HCL Software HCL Compass2.0