by Kastro CVE-2023-25690 · Apache Software Foundation Apache HTTP Server
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 577 of 786
Apache Software Foundation
CVE-2023-23638 · Apache Software Foundation Apache Dubbo
Apache Dubbo Deserialization Vulnerability Gadgets Bypass
mitre
CVE-2023-24734 · mitre
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a…
CVE-2023-24775 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.
CVE-2021-33353 · mitre
Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute…
CVE-2021-33352 · mitre
An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a pha…
CVE-2023-26779 · mitre
CleverStupidDog yf-exam v 1.8.0 is vulnerable to Deserialization which can lead to remote code execution (RCE).
CVE-2023-26922 · mitre
SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect para…
CVE-2023-26949 · mitre
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary…
CVE-2023-24641 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateview.php.
CVE-2023-24642 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateTxtview.php.
CVE-2023-24780 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns.
CVE-2023-24781 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php.
CVE-2021-33351 · mitre
Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to e…
CVE-2023-24773 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list.
CVE-2023-24777 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.
CVE-2023-24782 · mitre
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit.
CVE-2023-24736 · mitre
PMB v7.4.6 was discovered to contain a remote code execution (RCE) vulnerability via the component /sauvegarde/restaure_act.php.
CVE-2023-25395 · mitre
TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /settin…
CVE-2023-22889 · mitre
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation.
CVE-2023-24776 · mitre
Funadmin v3.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component \controller\Addon.php.
CVE-2023-24643 · mitre
Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the sid parameter at /php-jms/updateBlankTxtvi…
CVE-2023-26261 · mitre
In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another co…
CVE-2023-27574 · mitre
ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.
Unknown
CVE-2022-4328 · Unknown WooCommerce Checkout Field Manager
WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload
IBM
CVE-2023-27290 · IBM Observability with Instana
IBM Observability with Instana missing authentication
alextselegidis
CVE-2023-1269 · alextselegidis alextselegidis/easyappointments
Use of Hard-coded Credentials in alextselegidis/easyappointments
home-assistant
CVE-2023-27482 · home-assistant core
homeassistant is an open source home automation tool.
fedora
CVE-2021-36393 · fedora
In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.
CVE-2021-36394 · fedora
In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
CVE-2021-36392 · fedora
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.
answerdev
CVE-2023-1244 · answerdev answerdev/answer
Cross-site Scripting (XSS) - Stored in answerdev/answer
Trend Micro, Inc.
DOS Co., Ltd.
CVE-2023-22336 · DOS Co., Ltd. SS1 and Rakuraku PC Cloud
Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker…
CVE-2023-22344 · DOS Co., Ltd. SS1 and Rakuraku PC Cloud
Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a r…
xwiki
proofpoint
CVE-2023-0090 · proofpoint enterprise_protection
Proofpoint Enterprise Protection webservices unauthenticated RCE
SourceCodester
CVE-2023-1253 · SourceCodester Health Center Patient Record Management System
SourceCodester Health Center Patient Record Management System login.php sql injection
Qualcomm, Inc.
CVE-2022-33256 · Qualcomm, Inc. Snapdragon
Improper validation of array index in Multi-mode call processor
CVE-2022-40537 · Qualcomm, Inc. Snapdragon
Improper Validation of Array Index in Bluetooth HOST
CVE-2022-40515 · Qualcomm, Inc. Snapdragon
Double free in Video
CVE-2022-33257 · Qualcomm, Inc. Snapdragon
Time-of-check time-of-use race condition in Core
redhat
Gitpod
goauthentik
CVE-2023-26481 · goauthentik authentik