Archive
March 2023
Vulnerabilities first published in this month (UTC), newest first.
232 results · Clear filters · Feed
-
Critical 9.8
Improper neutralization of SQL parameter in PayPal module for PrestaShop
PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote att…
-
Critical 9.0
CVE-2023-0432
The web configuration service of the affected device contains an authenticated command injection vulnerability. It can be used to execute system commands on the operating system (OS) from the device in the context of the user "root." If the attacker has crede…
-
Critical 9.1
CVE-2023-0344
Akuvox E11 appears to be using a custom version of dropbear SSH server. This server allows an insecure option that by default is not in the official dropbear SSH server.
-
Critical 9.6
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-F…
-
Critical 9.8
In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to …
-
Critical 9.8
An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorre…
-
Critical 9.8
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.
-
Critical 9.1
OpenAPI Generator vulnerable to Server-Side Request Forgery
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.
-
Critical 9.8
An authentication bypass vulnerability in the web client interface for the CL4NX printer before firmware version 1.13.3…
-
Critical 9.8
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows …
-
Critical 10.0
RCE via file upload vulnerability in Generex CS141
Generex UPS CS141 below 2.06 version, could allow a remote attacker to upload a firmware file containing a webshell that could allow him to execute arbitrary code as root.
-
Critical 9.1CVE-2023-26482 Public exploit
Scope of workflow operations is not validated in nextcloud server
Nextcloud server is an open source home cloud implementation. In affected versions a missing scope validation allowed users to create workflows which are designed to be only available for administrators. Some workflows are designed to be RCE by invoking defin…
-
Critical 9.8CVE-2023-25076 EPSS 66%
A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master bra…
-
Critical 9.8
SSRF in Infoline Project Management System
Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery. This issue affects Project Management System: before 4.09.31.125.
-
Critical 9.8
Unauthenticated RCE affecting the AcyMailing plugin for Joomla
AnyMailing Joomla Plugin is vulnerable to unauthenticated remote code execution, when being granted access to the campaign's creation on front-office due to unrestricted file upload allowing PHP code to be injected. This issue affects AnyMailing Joomla Plugin…
-
Critical 9.8
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
A JNDI rebind operation in the default ORB listener in Payara Server 4.1.2.191 (Enterprise), 5.20.0 and newer (Enterprise), and 5.2020.1 and newer (Community), when Java 1.8u181 and earlier is used, allows remote attackers to load malicious code on the server…
-
Critical 9.1
Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack
Use of Hard-coded, Security-relevant Constants in GitHub repository deepset-ai/haystack prior to 0.1.30.
-
Critical 9.8
A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an att…
-
Critical 9.8
Memory exhaustion in LZ4 decompression in UniRPC daemon
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a memory-exhaustion issue, where a decompression routine will allocate increasing amounts of memory until all system m…
-
Critical 9.8
Stack buffer overflow in UniRPC library function
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user.
-
Critical 9.8
Authentication bypass in UniRPC's udadmin service
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from an authentication bypass vulnerability, where a special username with a deterministic password can be leveraged to byp…
-
Critical 9.8
Stack buffer overflow in UniRPC's udadmin_server service
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow in the "udadmin" service that can lead to remote code execution as the root user.
-
Critical 9.8
Heap buffer overflow in unirpcd
Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a heap-based buffer overflow in the unirpcd daemon that, if successfully exploited, can lead to remote code execution …
-
Critical 9.8
In Atrocore 1.5.25, the Create Import Feed option with glyphicon-glyphicon-paperclip function is vulnerable to Unauthen…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.8CVE-2022-36971 EPSS 15%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.4CVE-2022-36980 EPSS 82%
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.8CVE-2022-36974 EPSS 84%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.…
-
Critical 9.1
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2…
-
Critical 9.1
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6…
-
Critical 9.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6…
-
Critical 9.8CVE-2022-43634 EPSS 19%
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authenticat…
-
Critical 9.8
CVE-2023-28398
Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providi…
-
Critical 9.8CVE-2023-27394 EPSS 18%
CVE-2023-27394
Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView…
-
Critical 9.8
CVE-2023-27886
Osprey Pump Controller version 1.01 is vulnerable to an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP POST parameter called by index.php script.
-
Critical 9.8
CVE-2023-28654
Osprey Pump Controller version 1.01 has a hidden administrative account that has the hardcoded password that allows full access to the web management interface configuration. The user is not visible in Usernames and Passwords menu list of the application and …