Page(s) : 1 ... 57 58 59 60 61 62 63 64 65 66 [67] 68 69 70 71 72 73 74 75 76 77 ... | Result(s) : 39744 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
9.8 | 2023-11-27 | CVE-2023-41999 | cve | An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authen... |
9.8 | 2023-11-27 | CVE-2023-42000 | cve | Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remote attacker can exp... |
9.8 | 2023-11-27 | CVE-2023-49040 | cve | An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function. |
9.8 | 2023-11-27 | CVE-2023-49042 | cve | Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime parameter in the fu... |
9.8 | 2023-11-27 | CVE-2023-4922 | cve | The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter. |
9.1 | 2023-11-27 | CVE-2023-5559 | cve | The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitrary options from t... |
9.8 | 2023-11-27 | CVE-2023-5604 | cve | The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration that allows unauthent... |
9.8 | 2023-11-27 | CVE-2023-5974 | cve | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter. |
9.8 | 2023-11-27 | CVE-2023-6329 | cve | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthen... |
9.8 | 2023-11-27 | CVE-2023-4590 | cve | Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long filename argument thr... |
9.8 | 2023-11-27 | CVE-2023-6305 | cve | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of th... |
9.8 | 2023-11-27 | CVE-2023-6306 | cve | A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function of the file /ample/... |
9.8 | 2023-11-27 | CVE-2023-6307 | cve | A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of the file /download/image. The... |
9.8 | 2023-11-27 | CVE-2023-6309 | cve | A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/trans_result.php. The ... |
9.1 | 2023-11-26 | CVE-2023-49312 | cve | Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors in... |
9.8 | 2023-11-24 | CVE-2023-48312 | cve | capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the... |
9.8 | 2023-11-24 | CVE-2023-46575 | cve | A SQL injection vulnerability exists in Meshery prior to version v0.6.179, enabling a remote attacker to retrieve sensitive information and execute arbitrary code through the “o... |
9.8 | 2023-11-24 | CVE-2023-6274 | cve | A vulnerability was found in Byzoro Smart S80 up to 20231108. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage... |
9.8 | 2023-11-23 | CVE-2023-49210 | cve | The openssl (aka node-openssl) NPM package through 2.0.0 was characterized as "a nonsense wrapper with no real purpose" by its author, and accepts an opts argument that contains... |
9.8 | 2023-11-23 | CVE-2023-49214 | cve | Usedesk before 1.7.57 allows chat template injection. |
Page(s) : 1 ... 57 58 59 60 61 62 63 64 65 66 [67] 68 69 70 71 72 73 74 75 76 77 ... | Result(s) : 39744 |