by Kastro CVE-2023-25717 · Ruckus Wireless Multiple Products
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 582 of 786
Ruckus Wireless
mitre
CVE-2022-48323 · mitre
Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue.
CVE-2023-22855 · mitre
Kardex Mlog MCC 5.7.12+0-a203c2a213-master allows remote code execution.
CVE-2023-24159 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg…
CVE-2023-24160 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg…
CVE-2023-24161 · mitre
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanId…
CVE-2023-24646 · mitre
An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbi…
CVE-2020-21120 · mitre
SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cook…
CVE-2021-33925 · mitre
SQL Injection vulnerability in nitinparashar30 cms-corephp through commit bdabe52ef282846823bda102728a35506d0ec8f9 (May 19, 2021) allows…
CVE-2020-21119 · mitre
SQL Injection vulnerability in Kliqqi-CMS 2.0.2 in admin/admin_update_module_widgets.php in recordIDValue parameter, allows attackers to…
CVE-2023-24084 · mitre
ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function.
CVE-2023-24188 · mitre
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files t…
CVE-2022-40022 · mitre
Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.
CVE-2023-25725 · mitre
HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request…
CVE-2021-33304 · mitre
Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reas…
CVE-2022-47034 · mitre
A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.
CVE-2020-19825 · mitre
Cross Site Scripting (XSS) vulnerability in kevinpapst kimai2 1.30.0 in /src/Twig/Runtime/MarkdownExtension.php, allows attackers to gain…
CVE-2022-46892 · mitre
In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.
CVE-2022-48322 · mitre
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability.
CVE-2023-25718 · mitre
In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions…
CVE-2023-22854 · mitre
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to downloa…
thorsten
CVE-2023-0789 · thorsten thorsten/phpmyfaq
Command Injection in thorsten/phpmyfaq
CVE-2023-0788 · thorsten thorsten/phpmyfaq
Code Injection in thorsten/phpmyfaq
Tenda
Microsoft
CVE-2023-21689 · Microsoft Windows 10 Version 1507
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21690 · Microsoft Windows 10 Version 1507
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21692 · Microsoft Windows 10 Version 1507
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
CVE-2023-21716 · Microsoft Microsoft 365 Apps for Enterprise
Microsoft Word Remote Code Execution Vulnerability
CVE-2023-21803 · Microsoft Windows 10 Version 1507
Windows iSCSI Discovery Service Remote Code Execution Vulnerability
Jenkins Project
CVE-2023-25765 · Jenkins Project Jenkins Email Extension Plugin
In Jenkins Email Extension Plugin 2.93 and earlier, templates defined inside a folder were not subject to Script Security protection, all…
kiwitcms
Siemens
Priority
CVE-2023-23459 · Priority Priority for Windows
Priority Windows – Command Execution via SQL Injection
CVE-2023-23460 · Priority Priority Web
Priority Web – Authentication bypass
SourceCodester
CVE-2023-0781 · SourceCodester Canteen Management System
SourceCodester Canteen Management System removeOrder.php query sql injection
CVE-2023-0784 · SourceCodester Best Online News Portal
SourceCodester Best Online News Portal Login Page sql injection
datahub-project
CVE-2023-25560 · datahub-project datahub
JSON Injection in DataHub
CVE-2023-25557 · datahub-project datahub
Server-Side Request Forgery in DataHub
CVE-2023-25561 · datahub-project datahub
Login fail open on JAAS misconfiguration in DataHub
Hasherezade (github)
CVE-2023-23461 · Hasherezade (github) Libpeconv
Libpeconv – access violation
CVE-2023-23462 · Hasherezade (github) Libpeconv
Libpeconv – integer overflow
LS Electric
CVE-2023-22804 · LS Electric XBC-DN32U
CVE-2023-22804
CVE-2023-22807 · LS Electric XBC-DN32U
CVE-2023-22807
CVE-2023-0102 · LS Electric XBC-DN32U
CVE-2023-0102
SAP
CVE-2023-24530 · SAP BusinessObjects Business Intelligence Platform (CMC)