by Kastro CVE-2023-26359 · Adobe ColdFusion
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 573 of 786
Adobe
mitre
CVE-2023-27100 · mitre
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense…
CVE-2022-28491 · mitre
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_na…
CVE-2022-28494 · mitre
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function vi…
CVE-2023-27637 · mitre
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop.
CVE-2023-27638 · mitre
An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop.
CVE-2023-28725 · mitre
General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execut…
CVE-2023-27135 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the enabled parameter at /setting/…
CVE-2022-28492 · mitre
TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
CVE-2023-27060 · mitre
LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function.
CVE-2023-27224 · mitre
An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file.
CVE-2022-45637 · mitre
An insecure password reset issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 service via insecure expiry mech…
CVE-2023-27569 · mitre
The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header.
CVE-2023-26496 · mitre
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos A…
CVE-2023-26497 · mitre
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos A…
CVE-2023-26498 · mitre
An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto…
CVE-2023-27034 · mitre
PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.
CVE-2023-27078 · mitre
A command injection issue was found in TP-Link MR3020 v.1_150921 that allows a remote attacker to execute arbitrary commands via a crafte…
CVE-2022-36413 · mitre
Zoho ManageEngine ADSelfService Plus through 6203 is vulnerable to a brute-force attack that leads to a password reset on IDM applications.
CVE-2022-28496 · mitre
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via…
CVE-2022-28497 · mitre
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader fun…
CVE-2023-24655 · mitre
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under…
CVE-2022-28493 · mitre
A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,
CVE-2023-27570 · mitre
The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.
CVE-2023-28611 · mitre
Incorrect authorization in OMICRON StationGuard 1.10 through 2.20 and StationScout 1.30 through 2.20 allows an attacker to bypass intende…
CVE-2023-28610 · mitre
The update process in OMICRON StationGuard and OMICRON StationScout before 2.21 can be exploited by providing a modified firmware update…
tenable
CVE-2023-28662 · tenable
The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerabi…
CVE-2023-28667 · tenable
The Lead Generated WordPress Plugin, version <= 1.23, was affected by an unauthenticated insecure deserialization issue.
Netgear
answerdev
CVE-2023-1537 · answerdev answerdev/answer
Authentication Bypass by Capture-replay in answerdev/answer
SourceCodester
CVE-2023-1563 · SourceCodester Student Study Center Desk Management System
SourceCodester Student Study Center Desk Management System assign.php sql injection
CVE-2023-1556 · SourceCodester Judging Management System
SourceCodester Judging Management System summary_results.php sql injection
CVE-2023-1564 · SourceCodester Air Cargo Management System
SourceCodester Air Cargo Management System GET Parameter update_status.php sql injection
CVE-2023-1566 · SourceCodester Medical Certificate Generator App
SourceCodester Medical Certificate Generator App action.php sql injection
CVE-2023-1557 · SourceCodester E-Commerce System
SourceCodester E-Commerce System Username access control
Rockwell Automation
CVE-2023-27855 · Rockwell Automation ThinManager ThinServer
Rockwell Automation ThinManager ThinServer Path Traversal Upload
WellinTech
IBM
CVE-2023-27874 · IBM Aspera Faspex
IBM Aspera Faspex XML external entity injection
CVE-2023-25684 · IBM Security Key Lifecycle Manager
IBM Security Key Lifecycle Manager SQL injection
fedora
VulDB
code-projects
CVE-2023-1561 · code-projects Simple Online Hotel Reservation System
code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload
Kozea
VARTA Storage
CVE-2022-22512 · VARTA Storage Element backup