by Kastro CVE-2022-2024 · gogs gogs/gogs
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 579 of 786
gogs
mitre
CVE-2023-25234 · mitre
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromAddressNat via parameters entrys and mitInterface.
CVE-2023-27372 · mitre
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled.
CVE-2023-23080 · mitre
Certain Tenda products are vulnerable to command injection.
CVE-2023-24189 · mitre
An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to…
CVE-2021-35370 · mitre
An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.
CVE-2023-25231 · mitre
Tenda Router W30E V1.0.1.25(633) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
CVE-2023-25233 · mitre
Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function fromRouteStatic via parameters entrys and mitInterface.
CVE-2021-33387 · mitre
Cross Site Scripting Vulnerability in MiniCMS v.1.10 allows attacker to execute arbitrary code via a crafted get request.
CVE-2023-26550 · mitre
A SQL injection vulnerability in BMC Control-M before 9.0.20.214 allows attackers to execute arbitrary SQL commands via the memname JSON…
CVE-2023-26602 · mitre
ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonst…
CVE-2023-23156 · mitre
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the sin…
CVE-2023-24258 · mitre
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter.
CVE-2023-23155 · mitre
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in th…
CVE-2021-33224 · mitre
File upload vulnerability in Umbraco Forms v.8.7.0 allows unauthenticated attackers to execute arbitrary code via a crafted web.config an…
CVE-2023-24206 · mitre
Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function.
CVE-2023-24253 · mitre
Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability.
CVE-2022-34909 · mitre
An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android.
ZoneMinder
CVE-2023-26034 · ZoneMinder zoneminder
ZoneMinder SQL Injection
CVE-2023-26036 · ZoneMinder zoneminder
ZoneMinder contains Local File Inclusion vulnerability
CVE-2023-26035 · ZoneMinder zoneminder
ZoneMinder vulnerable to Missing Authorization
CVE-2023-26037 · ZoneMinder zoneminder
ZoneMinder contains SQL Injection via report_event_audit
PTC
CVE-2023-0755 · PTC ThingWorx Edge C-SDK
The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remo…
CVE-2023-0754 · PTC ThingWorx Edge C-SDK
The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotel…
Apache Software Foundation
CVE-2023-25696 · Apache Software Foundation Apache Airflow Hive Provider
Apache Airflow Hive Provider Beeline RCE
CVE-2023-25691 · Apache Software Foundation Apache Airflow Google Provider
Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution
CVE-2023-25693 · Apache Software Foundation Apache Airflow Sqoop Provider
Sqoop Apache Airflow Provider Remote Code Execution Vulnerability
Apple
huawei
CVE-2022-48255 · huawei
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325.
CVE-2022-48259 · huawei
There is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325.
CVE-2022-48283 · huawei
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability.
CVE-2022-48284 · huawei
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability.
WAGO
CVE-2022-45140 · WAGO Compact Controller CC100 (751-9301)
WAGO: Missing Authentication for Critical Function
CVE-2022-45138 · WAGO Compact Controller CC100 (751-9301)
WAGO: Missing Authentication for Critical Function
SourceCodester
CVE-2023-1037 · SourceCodester Dental Clinic Appointment Reservation System
SourceCodester Dental Clinic Appointment Reservation System POST Parameter login.php sql injection
CVE-2023-1038 · SourceCodester Online Reviewer Management System
SourceCodester Online Reviewer Management System questions-view.php sql injection
CVE-2023-0986 · SourceCodester Sales Tracker Management System
SourceCodester Sales Tracker Management System Edit User sql injection
CVE-2023-1040 · SourceCodester Online Graduate Tracer System
SourceCodester Online Graduate Tracer System add_acc.php sql injection
CVE-2023-1053 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site view_category.php sql injection
CVE-2023-1054 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site sql injection
BG-TEK
CVE-2021-4105 · BG-TEK COSLAT Firewall