VYPR

CVEs

38,101 total · page 343 of 763

AllCriticalHighKEV
  • CVE-2023-50651CriDec 30, 2023
    Totolink
    X6000R
    risk 0.64cvss 9.8epss 0.03

    TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.

  • CVE-2023-50589CriDec 30, 2023
    Embras
    Geosiap ERP
    risk 0.64cvss 9.8epss 0.01

    Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page.

  • CVE-2023-51136CriDec 30, 2023
    Totolink
    X2000r Firmware
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.

  • CVE-2023-51135CriDec 30, 2023
    Totolink
    X2000r Firmware
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.

  • CVE-2023-51133CriDec 30, 2023
    Totolink
    X2000r Firmware
    risk 0.64cvss 9.8epss 0.01

    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.

  • CVE-2023-50578CriDec 30, 2023
    Mingsoft
    Mcms
    risk 0.64cvss 9.8epss 0.02

    Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do.

  • CVE-2023-52252CriDec 30, 2023
    Unified Remote
    Unified Remote
    risk 0.64cvss 9.8epss 0.01

    Unified Remote 3.13.0 allows remote attackers to execute arbitrary Lua code because of a wildcarded Access-Control-Allow-Origin for the Remote upload endpoint.

  • CVE-2023-41544CriDec 30, 2023
    Jeecg
    Jeecgboot
    risk 0.64cvss 9.8epss 0.03

    SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component.

  • CVE-2023-41543CriDec 30, 2023
    Jeecg
    Jeecgboot
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check.

  • CVE-2023-41542CriDec 30, 2023
    Jeecg
    Jeecgboot
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the jmreport/qurestSql component.

  • CVE-2023-50035CriDec 29, 2023
    Phpgurukul
    Small CRM
    risk 0.64cvss 9.8epss 0.01

    PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed.

  • CVE-2023-52139CriDec 29, 2023
    Misskey Dev
    Misskey
    risk 0.00cvss 9.0epss 0.01

    Misskey is an open source, decentralized social media platform. Third-party applications may be able to access some endpoints or Websocket APIs that are incorrectly specified as [kind](https://github.com/misskey-dev/misskey/blob/406b4bdbe79b5b0b68fcdcb3c4b6e419460a0258/packages/b…

  • CVE-2023-4675CriDec 29, 2023
    GM Information Technologies
    MDO
    risk 0.64cvss 9.8epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allows SQL Injection. This issue affects MDO: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not…

  • CVE-2023-4541CriDec 29, 2023
    Ween Software
    Admin Panel
    risk 0.64cvss 9.8epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection. This issue affects Admin Panel: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not…

  • CVE-2023-51475CriDec 29, 2023
    WordPress
    WP MLM SOFTWARE PLUGIN
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in IOSS WP MLM SOFTWARE PLUGIN.This issue affects WP MLM SOFTWARE PLUGIN: from n/a through 4.0.

  • CVE-2023-51473CriDec 29, 2023
    Pixelemu
    Terraclassifieds
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Pixelemu TerraClassifieds – Simple Classifieds Plugin.This issue affects TerraClassifieds – Simple Classifieds Plugin: from n/a through 2.0.3.

  • CVE-2023-51468CriDec 29, 2023
    WordPress
    Rencontre – Dating Site
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.10.1.

  • CVE-2023-51421CriDec 29, 2023
    Soft8soft
    Verge3d
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

  • CVE-2023-51419CriDec 29, 2023
    Bertha
    Bertha AI
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Bertha.Ai BERTHA AI. Your AI co-pilot for WordPress and Chrome.This issue affects BERTHA AI. Your AI co-pilot for WordPress and Chrome: from n/a through 1.11.10.7.

  • CVE-2023-51417CriDec 29, 2023
    Jorisvm
    Jvm Gutenberg Rich Text Icons
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Joris van Montfort JVM Gutenberg Rich Text Icons.This issue affects JVM Gutenberg Rich Text Icons: from n/a through 1.2.3.

  • CVE-2023-51412CriDec 29, 2023
    Piotnet
    Piotnet Forms
    risk 0.59cvss 9.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Piotnet Piotnet Forms.This issue affects Piotnet Forms: from n/a through 1.0.25.

  • CVE-2023-51411CriDec 29, 2023
    Dynamiapps
    Frontend Admin
    risk 0.65cvss 10.0epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in Shabti Kaplan Frontend Admin by DynamiApps.This issue affects Frontend Admin by DynamiApps: from n/a through 3.18.3.

  • CVE-2023-51410CriDec 29, 2023
    Wpvibes
    Wp Mail Log
    risk 0.64cvss 9.9epss 0.01

    Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mail Log: from n/a through 1.1.2.

  • CVE-2023-51545CriDec 29, 2023
    WordPress
    Job Manager & Career
    risk 0.62cvss 9.6epss 0.00

    Cross-Site Request Forgery (CSRF), Deserialization of Untrusted Data vulnerability in ThemeHigh Job Manager & Career – Manage job board listings, and recruitments.This issue affects Job Manager & Career – Manage job board listings, and recruitments: from n/a through 1.4.4.

  • CVE-2023-51505CriDec 29, 2023
    WordPress
    Active Products Tables for WooCommerce
    risk 0.65cvss 10.0epss 0.01

    Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a…

  • CVE-2023-51470CriDec 29, 2023
    Boiteasite
    Rencontre
    risk 0.64cvss 9.9epss 0.01

    Deserialization of Untrusted Data vulnerability in Jacques Malgrange Rencontre – Dating Site.This issue affects Rencontre – Dating Site: from n/a through 3.11.1.

  • CVE-2023-51422CriDec 29, 2023
    Saleswonder
    Webinarignition
    risk 0.64cvss 9.9epss 0.01

    Deserialization of Untrusted Data vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom…

  • CVE-2023-51414CriDec 29, 2023
    Envialosimple
    Email Marketing Y Newsletters
    risk 0.62cvss 9.6epss 0.01

    Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1.

  • CVE-2023-51420CriDec 29, 2023
    Soft8soft
    Verge3d
    risk 0.59cvss 9.1epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishing and E-Commerce: from n/a through 4.5.2.

  • CVE-2023-49830CriDec 29, 2023
    Brainstormforce
    Astra
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1.

  • CVE-2023-47840CriDec 29, 2023
    Qodeinteractive
    Qode Essential Addons
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.

  • CVE-2023-46623CriDec 29, 2023
    Wpvnteam
    Wp Extra
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2.

  • CVE-2023-45751CriDec 29, 2023
    Posimyth
    Nexter Extension
    risk 0.59cvss 9.1epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0.3.

  • CVE-2023-40606CriDec 29, 2023
    Kanban For Wordpress
    Kanban Boards For Wordpress
    risk 0.59cvss 9.1epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.

  • CVE-2023-32095CriDec 29, 2023
    Milandinic
    Rename Media Files
    risk 0.64cvss 9.9epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1.

  • CVE-2023-25054CriDec 29, 2023
    Carrcommunications
    Rsvpmaker
    risk 0.65cvss 10.0epss 0.01

    Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6.

  • CVE-2023-23634CriDec 29, 2023
    Documize
    Documize
    risk 0.64cvss 9.8epss 0.01

    SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity endpoint.

  • CVE-2023-52174CriDec 29, 2023
    Xnview
    Classic
    risk 0.64cvss 9.8epss 0.01

    XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6.

  • CVE-2023-52173CriDec 29, 2023
    Xnview
    Classic
    risk 0.64cvss 9.8epss 0.01

    XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0.

  • CVE-2023-51434CriDec 29, 2023
    Honojs
    Honor products
    risk 0.60cvss 9.3epss 0.00

    Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.

  • CVE-2023-50104CriDec 29, 2023
    Zzcms
    Zzcms
    risk 0.64cvss 9.8epss 0.01

    ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute arbitrary code.

  • CVE-2023-50839CriDec 28, 2023
    Joomsky
    Js Help Desk
    risk 0.61cvss 9.3epss 0.02

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1.

  • CVE-2023-7163CriDec 28, 2023
    Dlink
    D-View
    risk 0.65cvss 10.0epss 0.02

    A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory…

  • CVE-2023-4671CriDec 28, 2023
    Talent Software
    ECOP
    risk 0.64cvss 9.8epss 0.01

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

  • CVE-2023-6879CriDec 27, 2023
    Fedoraproject
    Fedora
    risk 0.59cvss 9.0epss 0.01

    Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

  • CVE-2023-49001CriDec 27, 2023
    Indi Browser
    kvbrowser
    risk 0.64cvss 9.8epss 0.01

    An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the com.example.gurry.kvbrowswer.webview component.

  • CVE-2023-49000CriDec 27, 2023
    Artistscope
    ArtisBrowser
    risk 0.64cvss 9.8epss 0.01

    An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not…

  • CVE-2023-51084CriDec 27, 2023
    Hyavijava
    Hyavijava
    risk 0.64cvss 9.8epss 0.01

    hyavijava v6.0.07.1 was discovered to contain a stack overflow via the ResultConverter.convert2Xml method.

  • CVE-2023-47883CriDec 27, 2023
    Vladymix
    Tv Browser
    risk 0.64cvss 9.8epss 0.02

    The com.altamirano.fabricio.tvbrowser TV browser application through 4.5.1 for Android is vulnerable to JavaScript code execution via an explicit intent due to an exposed MainActivity.

  • CVE-2023-43955CriDec 27, 2023
    Bro
    Bro
    risk 0.00cvss 9.8epss 0.01

    The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData.