Page(s) : 1 ... 286 287 288 289 290 291 292 293 294 295 [296] 297 298 299 300 301 302 303 304 305 306 ... | Result(s) : 43290 |
Alerts
DATE | NAME | CATEGORIES | DETAIL | |
---|---|---|---|---|
9 | 2023-09-16 | CVE-2023-39612 | cve | A cross-site scripting (XSS) vulnerability in FileBrowser before v2.23.0 allows an authenticated attacker to escalate privileges to Administrator via user interaction with a cra... |
9.8 | 2023-09-16 | CVE-2023-42336 | cve | An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow... |
9.8 | 2023-09-15 | CVE-2023-39639 | cve | LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs. |
9.8 | 2023-09-15 | CVE-2023-39641 | cve | Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initConte... |
9.8 | 2023-09-15 | CVE-2023-39642 | cve | Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display(). |
9.8 | 2023-09-15 | CVE-2023-39643 | cve | Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds(). |
9.8 | 2023-09-15 | CVE-2023-4974 | cve | A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the compon... |
9.8 | 2023-09-15 | CVE-2023-36657 | cve | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows (desktop shortcuts, narrator) can be abused for privilege escalation. |
9.8 | 2023-09-15 | CVE-2023-36659 | cve | An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service (loss of com... |
9.8 | 2023-09-15 | CVE-2023-4833 | cve | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Besttem Network Marketing Software allows SQL Injection.This issu... |
9.8 | 2023-09-15 | CVE-2023-4988 | cve | A vulnerability, which was classified as problematic, was found in Bettershop LaikeTui. This affects an unknown part of the file index.php?module=system&action=uploadImg. The ma... |
9.8 | 2023-09-15 | CVE-2023-28614 | cve | Freewill iFIS (aka SMART Trade) 20.01.01.04 allows OS Command Injection via shell metacharacters to a report page. |
9.8 | 2023-09-15 | CVE-2023-42398 | cve | An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php. |
9.8 | 2023-09-15 | CVE-2023-38507 | cve | Strapi is the an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the login function of Strapi's admin screen, but it is po... |
9.8 | 2023-09-15 | CVE-2023-0923 | cve | A flaw was found in the Kubernetes service for notebooks in RHODS, where it does not prevent pods from other namespaces and applications from making requests to the Jupyter API.... |
9.8 | 2023-09-15 | CVE-2023-41887 | cve | OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any unauthenticated user to exe... |
9.6 | 2023-09-15 | CVE-2023-36735 | cve | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
9.8 | 2023-09-14 | CVE-2023-30909 | cve | A remote authentication bypass issue exists in some OneView APIs. |
9.8 | 2023-09-14 | CVE-2023-41011 | cve | Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortc... |
9.8 | 2023-09-14 | CVE-2023-4669 | cve | Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass.This issue affects SYSGuard 3001: before 3.2.20.0. |
Page(s) : 1 ... 286 287 288 289 290 291 292 293 294 295 [296] 297 298 299 300 301 302 303 304 305 306 ... | Result(s) : 43290 |