13 December 2023

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2023-42495 Public exploit

  Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

  Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

  Dasan Networks Dasan Networks
  Dec 13, 2023
• Critical 10.0
  CVE-2023-6723

  Unrestricted Upload of File with Dangerous Type in Repox

  An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system comprom…

  Repox Repox
  Dec 13, 2023
• Critical 9.4
  CVE-2023-6718

  Authentication Bypass Using an Alternate Path or Channel in Repox

  An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.

  Repox Repox
  Dec 13, 2023
• Critical 9.6
  CVE-2023-6753

  Path Traversal in mlflow/mlflow

  Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.

  MLflow mlflow/mlflow mlflow PyPI
  Dec 13, 2023
• Critical 9.8
  CVE-2023-40921

  SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to…

  Dec 13, 2023