by Kastro CVE-2023-0963 · SourceCodester Music Gallery Site
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 580 of 786
SourceCodester
CVE-2023-0938 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site GET Request music_list.php sql injection
CVE-2023-0961 · SourceCodester Music Gallery Site
SourceCodester Music Gallery Site GET Request view_music_details.php sql injection
CVE-2023-0980 · SourceCodester Yoga Class Registration System
SourceCodester Yoga Class Registration System Status Update update_status.php sql injection
CVE-2023-0981 · SourceCodester Yoga Class Registration System
SourceCodester Yoga Class Registration System Delete User sql injection
CVE-2023-0982 · SourceCodester Yoga Class Registration System
SourceCodester Yoga Class Registration System Add Class Entry sql injection
CVE-2023-0946 · SourceCodester Best POS Management System
SourceCodester Best POS Management System sql injection
VulDB
flatpressblog
CVE-2023-0947 · flatpressblog flatpressblog/flatpress
Path Traversal in flatpressblog/flatpress
mitre
CVE-2022-36231 · mitre
pdf_info 0.5.3 is vulnerable to Command Execution because the Ruby code uses backticks instead of Open3.
CVE-2022-39983 · mitre
File upload vulnerability in Pro Gamma Instant Developer RD3 22.5 r23, r30, and possibly earlier versions, allows attackers to execute ar…
CVE-2022-46637 · mitre
Prolink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.
CVE-2023-24108 · mitre
MvcTools 6d48cd6830fc1df1d8c9d61caa1805fd6a1b7737 was discovered to contain a code execution backdoor via the request package (requiremen…
CVE-2023-24114 · mitre
typecho 1.1/17.10.30 was discovered to contain a remote code execution (RCE) vulnerability via install.php.
CVE-2023-24320 · mitre
An access control issue in Axcora POS #0~gitf77ec09 allows unauthenticated attackers to execute arbitrary commands via unspecified vectors.
CVE-2023-24107 · mitre
hour_of_code_python_2015 commit 520929797b9ca43bb818b2e8f963fb2025459fa3 was discovered to contain a code execution backdoor via the requ…
CVE-2022-45599 · mitre
Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to…
CVE-2023-24212 · mitre
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg.
CVE-2022-45677 · mitre
SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.
CVE-2023-24093 · mitre
An access control issue in H3C A210-G A210-GV100R005 allows attackers to authenticate without a password.
CVE-2023-24104 · mitre
Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.
CVE-2023-26234 · mitre
JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance.
CVE-2023-24205 · mitre
Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the c…
CVE-2023-24184 · mitre
TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability.
CVE-2023-24080 · mitre
A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 (on iOS) allows attackers to compromise user acc…
CVE-2022-45564 · mitre
SQL Injection vulnerability in znfit Home improvement ERP management system V50_20220207,v42 allows attackers to execute arbitrary sql co…
CVE-2023-26092 · mitre
Liima before 1.17.28 allows server-side template injection.
CVE-2023-26093 · mitre
Liima before 1.17.28 allows Hibernate query language (HQL) injection, related to colToSort in the deployment filter.
CVE-2022-48149 · mitre
Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username para…
CVE-2023-26468 · mitre
Cerebrate 1.12 does not properly consider organisation_id during creation of API keys.
tenable
Siemens
CVE-2023-23914 · Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP
A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when mul…
Weintek
Apache Software Foundation
CVE-2023-25613 · Apache Software Foundation Apache Kerby LDAP Backend
LDAP Injection Vulnerability in Apache Kerby
nautobot
Hewlett Packard Enterprise (HPE)
CVE-2022-37936 · Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux
Unauthenticated Java deserialization vulnerability in Serviceguard Manager
CVE-2022-37937 · Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux
Pre-auth memory corruption in HPE Serviceguard
CVE-2022-37938 · Hewlett Packard Enterprise (HPE) HPE Serviceguard for Linux
Unauthenticated server side request forgery in HPE Serviceguard Manager
Tribe29
CVE-2022-46836 · Tribe29 Checkmk
PHP code injection in watolib
CVE-2022-48317 · Tribe29 Checkmk
Insecure Termination of RestAPI Session Tokens
Zyxel
Hybrid Software
CVE-2022-41217 · Hybrid Software Cloudflow
Cloudflow - Unauthenticated file upload vulnerability
NTN Information Technologies
CVE-2023-0939 · NTN Information Technologies Online Services Software