by Kastro CVE-2023-25280 · dlink dir820la1_firmware
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 574 of 786
dlink
EIP Stack Group
CVE-2022-43604 · EIP Stack Group OpENer
An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer devel…
CVE-2022-43605 · EIP Stack Group OpENer
An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer devel…
mitre
CVE-2023-27040 · mitre
Simple Image Gallery v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the username parameter.
CVE-2023-26805 · mitre
Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify.
CVE-2023-26806 · mitre
Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime,
CVE-2020-19947 · mitre
Cross Site Scripting vulnerability found in Markdown Edit allows a remote attacker to execute arbitrary code via the edit parameter of th…
CVE-2023-27041 · mitre
School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_…
CVE-2023-27250 · mitre
Online Book Store Project v1.0 is vulnerable to SQL Injection via /bookstore/bookPerPub.php.
CVE-2020-22647 · mitre
An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.
CVE-2023-24795 · mitre
Command execution vulnerability was discovered in JHR-N916R router firmware version<=21.11.1.1483.
CVE-2023-23150 · mitre
SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution.
CVE-2023-26905 · mitre
An issue was discovered in Alphaware - Simple E-Commerce System v1.0.
CVE-2023-28609 · mitre
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
CVE-2023-26784 · mitre
SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php…
code-projects
CVE-2023-1498 · code-projects Responsive Hotel Site
code-projects Responsive Hotel Site Newsletter Log messages.php sql injection
CVE-2023-1499 · code-projects Simple Art Gallery
code-projects Simple Art Gallery adminHome.php sql injection
VulDB
KnpLabs
Siemens
CVE-2023-28531 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.
Ghost Foundation
SourceCodester
CVE-2023-1467 · SourceCodester Student Study Center Desk Management System
SourceCodester Student Study Center Desk Management System POST Parameter path traversal
CVE-2023-1460 · SourceCodester Online Pizza Ordering System
SourceCodester Online Pizza Ordering System Password Change improper authentication
CVE-2023-1439 · SourceCodester Medicine Tracker System
SourceCodester Medicine Tracker System GET Parameter view_details.php sql injection
CVE-2023-1441 · SourceCodester Automatic Question Paper Generator System
SourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection
CVE-2023-1459 · SourceCodester Canteen Management System
SourceCodester Canteen Management System changeUsername.php sql injection
CVE-2023-1461 · SourceCodester Canteen Management System
SourceCodester Canteen Management System createCategories.php query sql injection
CVE-2023-1464 · SourceCodester Medicine Tracker System
SourceCodester Medicine Tracker System improper authentication
CVE-2023-1474 · SourceCodester Automatic Question Paper Generator System
SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection
CVE-2023-1475 · SourceCodester Canteen Management System
SourceCodester Canteen Management System createuser.php query sql injection
CVE-2023-1479 · SourceCodester Simple Music Player
SourceCodester Simple Music Player save_music.php unrestricted upload
CVE-2023-1480 · SourceCodester Monitoring of Students Cyber Accounts System
SourceCodester Monitoring of Students Cyber Accounts System POST Parameter login.php sql injection
CVE-2023-1497 · SourceCodester Simple and Nice Shopping Cart Script
SourceCodester Simple and Nice Shopping Cart Script uploaderm.php unrestricted upload
CVE-2023-1432 · SourceCodester Online Food Ordering System
SourceCodester Online Food Ordering System POST Request access control
CVE-2023-1468 · SourceCodester Student Study Center Desk Management System
SourceCodester Student Study Center Desk Management System Report sql injection
flatpak
jumpserver
cilium
Utarit Information Technologies
CVE-2023-1152 · Utarit Information Technologies Persolus
SQLi in Utarit Persolus
ATM Consulting
CVE-2022-4933 · ATM Consulting dolibarr_module_quicksupplierprice
ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice sql injection
Omron
Samsung Mobile
CVE-2023-21455 · Samsung Mobile Samsung Mobile Devices
Improper authorization implementation in Exynos baseband prior to SMR Mar-2023 Release 1 allows incorrect handling of unencrypted message.
CVE-2023-21459 · Samsung Mobile Samsung Mobile Devices
Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault.
CVE-2023-21456 · Samsung Mobile Samsung Mobile Devices