Click to open the Alert Filter

 
Year Month
Severity
Categories
Search by Alert Name
Page(s) : 1 ... 407 408 409 410 411 412 413 414 415 416 [417] 418 419 420 421 422 423 424 425 426 427 ... Result(s) : 43310

Alerts Feed Alerts

DATE NAME CATEGORIES DETAIL
9.8 2023-02-14 CVE-2023-24161 cve TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
9.8 2023-02-14 CVE-2023-24482 cve A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 ...
9.1 2023-02-14 CVE-2023-24530 cve SAP BusinessObjects Business Intelligence Platform (CMC) - versions 420, 430, allows an authenticated admin user to upload malicious code that can be executed by the application...
9.8 2023-02-13 CVE-2023-24084 cve ChiKoi v1.0 was discovered to contain a SQL injection vulnerability via the load_file function.
9.8 2023-02-13 CVE-2023-24646 cve An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file.
9.8 2023-02-13 CVE-2022-47034 cve A type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.
9.1 2023-02-13 CVE-2023-24188 cve ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted.
9.8 2023-02-13 CVE-2023-25717 cve Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=passwo...
9.8 2023-02-13 CVE-2023-25718 cve In ConnectWise Control through 22.9.10032 (formerly known as ScreenConnect), after an executable file is signed, additional instructions can be added without invalidating the si...
9.8 2023-02-13 CVE-2022-40022 cve Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a command injection vulnerability.
9.8 2023-02-13 CVE-2022-4445 cve The FL3R FeelBox WordPress plugin through 8.1 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticate...
9.8 2023-02-13 CVE-2022-3089 cve Echelon SmartServer 2.2 with i.LON Vision 2.2 stores cleartext credentials in a file, which could allow an attacker to obtain cleartext usernames and passwords of the Smart...
9.8 2023-02-13 CVE-2023-23551 cve Control By Web X-600M devices run Lua scripts and are vulnerable to code injection, which could allow an attacker to remotely execute arbitrary code.
9.8 2023-02-13 CVE-2022-48322 cve NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P be...
9.8 2023-02-13 CVE-2022-48323 cve Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrar...
9.8 2023-02-12 CVE-2023-0788 cve Code Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
9.8 2023-02-12 CVE-2023-0789 cve Command Injection in GitHub repository thorsten/phpmyfaq prior to 3.1.11.
9.8 2023-02-12 CVE-2023-0784 cve A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. Affected is an unknown function of the component Login Page. The manipulatio...
9.8 2023-02-12 CVE-2022-25729 cve Memory corruption in modem due to improper length check while copying into memory
9.8 2023-02-12 CVE-2022-33279 cve Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
Page(s) : 1 ... 407 408 409 410 411 412 413 414 415 416 [417] 418 419 420 421 422 423 424 425 426 427 ... Result(s) : 43310