by Kastro CVE-2022-42948 · Fortra Cobalt Strike
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 572 of 786
Fortra
mitre
CVE-2023-26801 · mitre
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a…
CVE-2023-26802 · mitre
An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass au…
CVE-2022-28495 · mitre
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function v…
CVE-2023-25261 · mitre
Certain Stimulsoft GmbH products are affected by: Remote Code Execution.
CVE-2023-26864 · mitre
SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges vi…
CVE-2023-23149 · mitre
DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability.
CVE-2023-26800 · mitre
Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.pat…
CVE-2023-28150 · mitre
An issue was discovered in Independentsoft JODF before 1.1.110.
CVE-2023-28151 · mitre
An issue was discovered in Independentsoft JSpreadsheet before 1.1.110.
CVE-2023-28152 · mitre
An issue was discovered in Independentsoft JWord before 1.1.110.
CVE-2022-46415 · mitre
DJI Spark 01.00.0900 allows remote attackers to prevent legitimate terminal connections by exhausting the DHCP IP address pool.
CVE-2022-46416 · mitre
Parrot Bebop 4.7.1.
CVE-2022-45597 · mitre
ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation.
dataease
VulDB
CVE-2023-1612 · VulDB
Rebuild list-file sql injection
CVE-2023-1594 · VulDB
novel-plus list MenuService sql injection
CVE-2023-1606 · VulDB
novel-plus DictController.java sql injection
CVE-2023-1634 · VulDB
OTCMS URL Parameter info_deal.php UseCurl server-side request forgery
CVE-2023-1610 · VulDB
Rebuild list sql injection
linagora
Ubiquiti
CVE-2023-1458 · Ubiquiti EdgeRouter X
A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical.
CVE-2023-1456 · Ubiquiti EdgeRouter X
A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6.
CVE-2023-1457 · Ubiquiti EdgeRouter X
A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6.
baserproject
CVE-2023-25654 · baserproject basercms
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
CVE-2023-25655 · baserproject basercms
baserCMS allows any file to be uploaded
denoland
Jenkins Project
CVE-2023-28668 · Jenkins Project Jenkins Role-based Authorization Strategy Plugin
Jenkins Role-based Authorization Strategy Plugin 587.v2872c41fa_e51 and earlier grants permissions even after they've been disabled.
CVE-2023-28677 · Jenkins Project Jenkins Convert To Pipeline Plugin
Jenkins Convert To Pipeline Plugin 1.0 and earlier uses basic string concatenation to convert Freestyle projects' Build Environment, Buil…
kyubisation
CVE-2023-28444 · kyubisation angular-server-side-configuration
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
SourceCodester
CVE-2023-1589 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System approve_delete.php exec sql injection
CVE-2023-1590 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System currency.php exec sql injection
CVE-2023-1591 · SourceCodester Automatic Question Paper Generator System
SourceCodester Automatic Question Paper Generator System sql injection
CVE-2023-1592 · SourceCodester Automatic Question Paper Generator System
SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection
tensorflow
google_android
CVE-2022-42498 · google_android
In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check.
CVE-2022-42499 · google_android
In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow.
CVE-2022-20532 · google_android
In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow.
CVE-2023-20951 · google_android
In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible out of bounds write due to a missing bounds check.
CVE-2023-20954 · google_android
In SDP_AddAttribute of sdp_db.cc, there is a possible out of bounds write due to an incorrect bounds check.
CVE-2023-21057 · google_android
In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check.
CVE-2023-21058 · google_android
In lcsm_SendRrAcquiAssist of lcsm_bcm_assist.c, there is a possible out of bounds write due to a missing bounds check.
Zhong Bang
CVE-2023-1608 · Zhong Bang CRMEB Java
Zhong Bang CRMEB Java list getAdminList sql injection
Huawei
CVE-2022-48353 · Huawei HarmonyOS
Some smartphones have configuration issues.
CVE-2022-48349 · Huawei HarmonyOS
The control component has a spoofing vulnerability.
CVE-2022-48348 · Huawei HarmonyOS