by Kastro CVE-2023-0562 · PHPGurukul Bank Locker Management System
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
39,271 matching vulnerabilities · Page 586 of 786
PHPGurukul
Unknown
CVE-2022-4395 · Unknown Membership For WooCommerce
Membership For WooCommerce < 2.1.7 - Unauthenticated Arbitrary File Upload
FreshTomato
mitre
CVE-2022-45297 · mitre
EQ v1.5.31 to v2.2.0 was discovered to contain a SQL injection vulnerability via the UserPwd parameter.
CVE-2022-48107 · mitre
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /setnetworksettings/IPAddress.
CVE-2022-48108 · mitre
D-Link DIR_878_FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask.
CVE-2022-48066 · mitre
An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.
CVE-2022-48175 · mitre
Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=d…
CVE-2022-45172 · mitre
An issue was discovered in LIVEBOX Collaboration vDesk before v018.
CVE-2022-48006 · mitre
An arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-44298 · mitre
SiteServer CMS 7.1.3 is vulnerable to SQL Injection.
CVE-2022-39811 · mitre
Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader.
CVE-2022-23334 · mitre
The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attack…
CVE-2022-48008 · mitre
An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a craft…
CVE-2023-24612 · mitre
The PdfBook extension through 2.0.5 before b07b6a64 for MediaWiki allows command injection via an option.
CVE-2022-48011 · mitre
Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.
Siretta
CVE-2022-41030 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41013 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41016 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41017 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41018 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41019 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41014 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
CVE-2022-41015 · Siretta QUARTZ-GOLD
Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-…
Schneider Electric
CVE-2022-32523 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32524 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32525 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32526 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32527 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32529 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-32522 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially le…
CVE-2022-45788 · Schneider Electric EcoStruxure Control Expert
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of…
CVE-2022-0223 · Schneider Electric EcoStruxure Power Commission
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow an attacke…
CVE-2022-22731 · Schneider Electric EcoStruxure Power Commission
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a function that could al…
CVE-2022-32514 · Schneider Electric C-Bus Network Automation Controller, LSS5500NAC
A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to gain control of the device when logging into a we…
CVE-2022-32513 · Schneider Electric C-Bus Network Automation Controller, LSS5500NAC
A CWE-521: Weak Password Requirements vulnerability exists that could allow an attacker to gain control of the device when the attacker b…
CVE-2022-32515 · Schneider Electric Conext™ ComBox
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that could cause brute force attacks to take ov…
CVE-2022-32518 · Schneider Electric Data Center Expert
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performe…
CVE-2022-32520 · Schneider Electric Data Center Expert
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performe…
CVE-2022-32519 · Schneider Electric Data Center Expert
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when per…
CVE-2022-32528 · Schneider Electric IGSS Data Server (IGSSdataServer.exe)
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific file…
ChangingTec
CVE-2022-39060 · ChangingTec MegaServiSignAdapter
ChangingTec MegaServiSignAdapter - Improper Input Validation
contentstudio
CVE-2023-0556 · contentstudio ContentStudio
ContentStudio <= 1.2.5 - Missing Authorization
CVE-2023-0558 · contentstudio ContentStudio
ContentStudio <= 1.2.5 - Authorization Bypass
Snap One
CVE-2023-23582 · Snap One Wattbox WB-300-IP-3
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior are vulnerable to a heap-based buffer overflow, which could allow an attacker t…
CVE-2023-24020 · Snap One Wattbox WB-300-IP-3
Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior could bypass the brute force protection, allowing multiple attempts to force a…
SourceCodester
CVE-2023-0530 · SourceCodester Online Tours & Travels Management System
SourceCodester Online Tours & Travels Management System approve_user.php sql injection
CVE-2023-0570 · SourceCodester Online Tours & Travels Management System