by Kastro CVE-2023-23924 · dompdf dompdf
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 585 of 786
dompdf
TRENDnet
snyk
trendmicro
mitre
CVE-2022-48079 · mitre
Monnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code…
CVE-2023-24162 · mitre
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml param…
CVE-2021-36424 · mitre
An issue discovered in phpwcms 1.9.25 allows remote attackers to run arbitrary code via DB user field during installation.
CVE-2022-47769 · mitre
An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious f…
CVE-2022-47770 · mitre
Serenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.
CVE-2022-47854 · mitre
i-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php.
CVE-2022-48113 · mitre
A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted P…
CVE-2022-48130 · mitre
Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRout…
CVE-2021-36484 · mitre
SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page.
CVE-2022-48114 · mitre
RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.
CVE-2021-36431 · mitre
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_…
CVE-2021-36433 · mitre
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_delet…
CVE-2021-36434 · mitre
SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jo_json_…
CVE-2023-23076 · mitre
OS Command injection vulnerability in Support Center Plus 11 via Executor in Action when creating new schedules.
CVE-2022-47002 · mitre
A vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted w…
CVE-2022-47003 · mitre
A vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web requ…
CVE-2023-24163 · mitre
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
CVE-2022-47035 · mitre
Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetC…
CVE-2022-47780 · mitre
SQL Injection vulnerability in Bangresto 1.0 via the itemID parameter.
CVE-2021-36503 · mitre
SQL injection vulnerability in native-php-cms 1.0 allows remote attackers to run arbitrary SQL commands via the cat parameter to /list.ph…
CVE-2022-47873 · mitre
Netcad KEOS 1.0 is vulnerable to XML External Entity (XXE) resulting in SSRF with XXE (remote).
CVE-2023-24241 · mitre
Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php.
CVE-2022-47697 · mitre
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account tak…
CVE-2022-47699 · mitre
COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.
CVE-2022-48082 · mitre
Easyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.asmx/SearchTag.
CVE-2022-47714 · mitre
Last Yard 22.09.8-1 does not enforce HSTS headers
ampache
CVE-2023-0606 · ampache ampache/ampache
Cross-site Scripting (XSS) - Reflected in ampache/ampache
Atlassian
CVE-2023-22501 · Atlassian Jira Service Management Data Center
An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate…
Schneider Electric
CVE-2022-2329 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service…
CVE-2022-24324 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially lea…
CVE-2022-45789 · Schneider Electric EcoStruxure Control Expert
A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on th…
CVE-2022-42971 · Schneider Electric APC Easy UPS Online Monitoring Software
A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker…
CVE-2022-42970 · Schneider Electric APC Easy UPS Online Monitoring Software
A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires…
CVE-2023-22610 · Schneider Electric EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA)
A CWE-863: Incorrect Authorization vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific mes…
Apache Software Foundation
CVE-2022-28331 · Apache Software Foundation Apache Portable Runtime (APR)
Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function
CVE-2022-24963 · Apache Software Foundation Apache Portable Runtime (APR)
Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions
CVE-2023-24997 · Apache Software Foundation Apache InLong
Apache InLong: Jdbc Connection Security Bypass
IBM
CVE-2022-22486 · IBM Tivoli Workload Scheduler
IBM Tivoli Workload Scheduler XML external entity injection
CVE-2022-38389 · IBM Tivoli Workload Scheduler
IBM Tivoli Workload Scheduler XML external entity injection
Thinking Software Technology Co., Ltd.
CVE-2023-22900 · Thinking Software Technology Co., Ltd. Efence
Thinking Software Technology Co., Ltd. Efence - SQL Injection
Dell
PHPGurukul
CVE-2023-0641 · PHPGurukul Employee Leaves Management System