by Kastro CVE-2023-28461 · arraynetworks arrayos_ag
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 575 of 786
arraynetworks
Microsoft
CVE-2023-23397 · Microsoft Microsoft Office LTSC 2021
Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2023-23415 · Microsoft Windows 10 Version 1809
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
CVE-2023-23392 · Microsoft Windows Server 2022
HTTP Protocol Stack Remote Code Execution Vulnerability
CVE-2023-21708 · Microsoft Windows 10 Version 1809
Remote Procedure Call Runtime Remote Code Execution Vulnerability
Unknown
CVE-2023-0037 · Unknown 10Web Map Builder for Google Maps
10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
mitre
CVE-2020-27507 · mitre
The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow t…
CVE-2023-25344 · mitre
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.p…
CVE-2023-26074 · mitre
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos…
CVE-2023-27061 · mitre
Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the wifiFilterListRemark paramete…
CVE-2023-27063 · mitre
Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in th…
CVE-2023-27052 · mitre
E-Commerce System v1.0 ws discovered to contain a SQL injection vulnerability via the id parameter at /admin/delete_user.php.
CVE-2023-28343 · mitre
OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone ti…
CVE-2023-27240 · mitre
Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip.
CVE-2023-28371 · mitre
In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or ..
CVE-2023-28154 · mitre
Webpack 5 before 5.76.0 does not avoid cross-realm object access.
CVE-2023-24726 · mitre
Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page.
CVE-2023-26076 · mitre
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 1280, Exynos 2200, Exynos Modem 5123, Exynos Mode…
CVE-2023-27757 · mitre
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary…
CVE-2023-26511 · mitre
A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain…
CVE-2023-27239 · mitre
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet.
CVE-2023-27074 · mitre
BP Monitoring Management System v1.0 was discovered to contain a SQL injection vulnerability via the emailid parameter in the login page.
SourceCodester
CVE-2023-1379 · SourceCodester Friendly Island Pizza Website and Ordering System
SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter addmem.php sql injection
CVE-2023-1392 · SourceCodester Online Pizza Ordering System
SourceCodester Online Pizza Ordering System save_menu unrestricted upload
CVE-2023-1378 · SourceCodester Friendly Island Pizza Website and Ordering System
SourceCodester Friendly Island Pizza Website and Ordering System POST Parameter paypalsuccess.php sql injection
CVE-2023-1394 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System bsitemp.php mysqli_query sql injection
CVE-2023-1391 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System ab.php unrestricted upload
Combodo
foxcpp
Hewlett Packard Enterprise (HPE)
CVE-2023-25589 · Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager
Unauthenticated Arbitrary User Creation Leads to Complete System Compromise
SAP
CVE-2023-25616 · SAP Business Objects Business Intelligence Platform (CMC)
Code Injection vulnerability in SAP Business Objects Business Intelligence Platform (CMC)
CVE-2023-27269 · SAP NetWeaver Application Server for ABAP and ABAP Platform
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27500 · SAP NetWeaver AS for ABAP and ABAP Platform (SAPRSBRO Program)
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-27501 · SAP NetWeaver AS for ABAP and ABAP Platform
Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
CVE-2023-23857 · SAP NetWeaver AS for Java
Improper Access Control in SAP NetWeaver AS for Java
CVE-2023-25617 · SAP Business Objects (Adaptive Job Server)
OS Command Execution vulnerability in SAP Business Objects Business Intelligence Platform (Adaptive Job Server)
microfocus
tenable
VeronaLabs
CVE-2022-38074 · VeronaLabs WP Statistics
WordPress WP Statistics Plugin <= 13.2.10 is vulnerable to SQL Injection
VulDB
Akuvox
CVE-2023-0345 · Akuvox E11
CVE-2023-0345
CVE-2023-0352 · Akuvox E11
CVE-2023-0352
CVE-2023-0354 · Akuvox E11
CVE-2023-0354
CVE-2023-0349 · Akuvox E11
CVE-2023-0349
CVE-2023-0353 · Akuvox E11
CVE-2023-0353
RichPlugins
CVE-2022-44580 · RichPlugins Plugin for Google Reviews
WordPress Plugin for Google Reviews Plugin <= 2.2.3 is vulnerable to SQL Injection
Siemens
CVE-2023-25957 · Siemens Mendix SAML (Mendix 7 compatible)