by Kastro CVE-2023-25234 · mitre
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,260 matching vulnerabilities · Page 578 of 786
mitre
CVE-2023-27372 · mitre
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled.
CVE-2023-25231 · mitre
Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
CVE-2023-25233 · mitre
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
CVE-2023-23315 · mitre
The PrestaShop e-commerce platform module stripejs contains a Blind SQL injection vulnerability up to version 4.5.5.
CVE-2023-26780 · mitre
CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.
CVE-2022-45551 · mitre
An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET comman…
CVE-2023-24258 · mitre
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter.
CVE-2022-45553 · mitre
An issue discovered in Shenzhen Zhibotong Electronics WBT WE1626 Router v 21.06.18 allows attacker to execute arbitrary commands via seri…
CVE-2022-46973 · mitre
Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2022-46501 · mitre
Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Or…
CVE-2023-24253 · mitre
Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability.
VulDB
SourceCodester
CVE-2023-1099 · SourceCodester Online Student Management System
SourceCodester Online Student Management System edit-class-detail.php sql injection
CVE-2023-1100 · SourceCodester Online Catering Reservation System
SourceCodester Online Catering Reservation System POST Parameter add_message.php sql injection
CVE-2023-1130 · SourceCodester Computer Parts Sales and Inventory System
SourceCodester Computer Parts Sales and Inventory System processlogin sql injection
CVE-2023-1151 · SourceCodester Electronic Medical Records System
SourceCodester Electronic Medical Records System Cookie administrator.php sql injection
CVE-2023-1053 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site view_category.php sql injection
CVE-2023-1054 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site sql injection
Uzay Baskul
CVE-2023-1064 · Uzay Baskul Weighbridge Automation Software
SQLi in Uzay Baskul's Weighbridge Automation Software
xwiki
CVE-2023-26475 · xwiki xwiki-platform
XWiki Platform vulnerable to Remote Code Execution in Annotations
CVE-2023-26477 · xwiki xwiki-platform
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
CVE-2023-26055 · xwiki xwiki-commons
XWiki Commons may allow privilege escalation to programming rights via user's first name
CVE-2023-26472 · xwiki xwiki-platform
XWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
CVE-2023-26471 · xwiki xwiki-platform
XWiki Platform users may execute anything with superadmin right through comments and async macro
CVE-2023-26474 · xwiki xwiki-platform
XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
Cisco
CVE-2023-20078 · Cisco Cisco IP Phones with Multiplatform Firmware
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
CVE-2023-20079 · Cisco Cisco IP Phones with Multiplatform Firmware
Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities
Hewlett Packard Enterprise (HPE)
CVE-2023-22747 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Multiple Unauthenticated Command Injections in the PAPI Protocol
CVE-2023-22748 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Multiple Unauthenticated Command Injections in the PAPI Protocol
CVE-2023-22749 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Multiple Unauthenticated Command Injections in the PAPI Protocol
CVE-2023-22750 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Multiple Unauthenticated Command Injections in the PAPI Protocol
CVE-2023-22751 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol
CVE-2023-22752 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol
CVE-2023-22753 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
CVE-2023-22754 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
CVE-2023-22755 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
CVE-2023-22756 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
CVE-2023-22757 · Hewlett Packard Enterprise (HPE) Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central
Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
WAGO
CVE-2022-45140 · WAGO Compact Controller CC100 (751-9301)
WAGO: Missing Authentication for Critical Function
CVE-2022-45138 · WAGO Compact Controller CC100 (751-9301)
WAGO: Missing Authentication for Critical Function
ForgeRock
CVE-2023-0339 · ForgeRock Access Management Web Policy Agent
AM Web Policy Agent path traversal
CVE-2023-0511 · ForgeRock Access Management Java Policy Agent
AM Java Policy Agent path traversal
gradle
Glox Technology
CVE-2021-3854 · Glox Technology Useroam Hotspot