by Kastro CVE-2023-25279 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 576 of 786
mitre
CVE-2021-33360 · mitre
An issue found in Stoqey gnuplot v.0.0.3 and earlier allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child_…
CVE-2021-45423 · mitre
A Buffer Overflow vulnerabilityexists in Pev 0.81 via the pe_exports function from exports.c..
CVE-2023-26072 · mitre
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos…
CVE-2023-26073 · mitre
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos…
CVE-2023-26075 · mitre
An issue was discovered in Samsung Mobile Chipset and Baseband Modem Chipset for Exynos 850, Exynos 980, Exynos 1080, Exynos 1280, Exynos…
CVE-2023-24774 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php.
CVE-2023-25207 · mitre
PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.
CVE-2023-24033 · mitre
The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly c…
CVE-2023-26957 · mitre
onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
CVE-2023-24762 · mitre
OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted Local…
CVE-2023-27202 · mitre
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.
CVE-2023-27203 · mitre
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.
CVE-2023-27204 · mitre
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.
CVE-2023-27205 · mitre
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.
CVE-2023-27207 · mitre
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.
CVE-2023-27210 · mitre
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php.
CVE-2023-27213 · mitre
Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/st…
CVE-2023-27214 · mitre
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parame…
CVE-2022-48367 · mitre
An issue was discovered in eZ Publish Ibexa Kernel before 7.5.28.
froxlor
CVE-2023-1307 · froxlor froxlor/froxlor
Authentication Bypass by Primary Weakness in froxlor/froxlor
snyk
CVE-2023-26110 · snyk
All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user in…
CVE-2023-26109 · snyk
All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to impr…
SourceCodester
CVE-2023-1300 · SourceCodester COVID 19 Testing Management System
SourceCodester COVID 19 Testing Management System POST Parameter patient-report.php sql injection
CVE-2023-1301 · SourceCodester Friendly Island Pizza Website and Ordering System
SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter deleteorder.php sql injection
CVE-2023-1311 · SourceCodester Friendly Island Pizza Website and Ordering System
SourceCodester Friendly Island Pizza Website and Ordering System GET Parameter large.php sql injection
CVE-2023-1290 · SourceCodester Sales Tracker Management System
SourceCodester Sales Tracker Management System view_client.php sql injection
CVE-2023-1291 · SourceCodester Sales Tracker Management System
SourceCodester Sales Tracker Management System manage_client.php sql injection
CVE-2023-1292 · SourceCodester Sales Tracker Management System
SourceCodester Sales Tracker Management System Master.php delete_client sql injection
CVE-2023-1294 · SourceCodester File Tracker Manager System
SourceCodester File Tracker Manager System POST Parameter login.php sql injection
CVE-2023-1351 · SourceCodester Computer Parts Sales and Inventory System
SourceCodester Computer Parts Sales and Inventory System cust_transac.php sql injection
CVE-2023-1308 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System adminlog.php sql injection
CVE-2023-1309 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System search_it.php sql injection
CVE-2023-1310 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System prof.php sql injection
CVE-2023-1358 · SourceCodester Gadget Works Online Ordering System
SourceCodester Gadget Works Online Ordering System POST Parameter login.php sql injection
CVE-2023-1357 · SourceCodester Simple Bakery Shop Management System
SourceCodester Simple Bakery Shop Management System Admin Login sql injection
tenable
CVE-2023-27853 · tenable
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker…
CVE-2023-27852 · tenable
NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a buffer overflow vulnerability in various CGI mechanisms that could allow an…
VulDB
CVE-2023-1350 · VulDB
liferea Feed Enrichment update.c update_job_run os command injection
CVE-2023-1303 · VulDB
UCMS System File Management Module fileedit.php unrestricted upload
CVE-2023-1321 · VulDB
lmxcms AcquisiAction.class.php update sql injection
CVE-2023-1322 · VulDB
lmxcms BookAction.class.php reply sql injection
Jenkins Project
CVE-2023-27898 · Jenkins Project Jenkins
Jenkins 2.270 through 2.393 (both inclusive), LTS 2.277.1 through 2.375.3 (both inclusive) does not escape the Jenkins version a plugin d…
CVE-2023-27905 · Jenkins Project Jenkins update-center2
Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resul…
bytecodealliance
CVE-2023-26489 · bytecodealliance wasmtime
Guest-controlled out-of-bounds read/write on x86_64 in wasmtime
Dassault Systèmes
CVE-2023-1287 · Dassault Systèmes ENOVIA Live Collaboration
ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
Alpata
CVE-2023-1091 · Alpata Licensed Warehousing Automation System