22 December 2023

80 results · Feed

• Low 3.5
  CVE-2023-7057

  code-projects Faculty Management System yearlevel.php cross site scripting

  A vulnerability, which was classified as problematic, has been found in code-projects Faculty Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pages/yearlevel.php. The manipulation of the argument Year Level/Secti…

  code-projects Faculty Management System
  Dec 22, 2023
• Low 2.4
  CVE-2023-7056

  code-projects Faculty Management System subjects.php cross site scripting

  A vulnerability classified as problematic was found in code-projects Faculty Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/pages/subjects.php. The manipulation of the argument Description/Units leads to c…

  code-projects Faculty Management System
  Dec 22, 2023
• Medium 4.3
  CVE-2023-7055

  PHPGurukul Online Notes Sharing System Contact Information profile.php access control

  A vulnerability classified as problematic has been found in PHPGurukul Online Notes Sharing System 1.0. Affected is an unknown function of the file /user/profile.php of the component Contact Information Handler. The manipulation of the argument mobilenumber l…

  PHPGurukul Online Notes Sharing System
  Dec 22, 2023
• Medium 5.5
  CVE-2023-7054

  PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload

  A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /user/add-notes.php. The manipulation leads to unrestricted upload. The attack may be initiated r…

  PHPGurukul Online Notes Sharing System
  Dec 22, 2023
• Low 3.1
  CVE-2023-7053

  PHPGurukul Online Notes Sharing System signup.php weak password

  A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/signup.php. The manipulation leads to weak password requirements. The attack can be initiat…

  PHPGurukul Online Notes Sharing System
  Dec 22, 2023
• Medium 4.3
  CVE-2023-7052

  PHPGurukul Online Notes Sharing System profile.php cross-site request forgery

  A vulnerability was found in PHPGurukul Online Notes Sharing System 1.0. It has been classified as problematic. This affects an unknown part of the file /user/profile.php. The manipulation of the argument name leads to cross-site request forgery. It is possib…

  PHPGurukul Online Notes Sharing System
  Dec 22, 2023
• Unscored —
  CVE-2023-50147

  There is an arbitrary command execution vulnerability in the setDiagnosisCfg function of the cstecgi .cgi of the TOTOli…

  Dec 22, 2023
• Unscored —
  CVE-2023-24609

  Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Sha…

  Dec 22, 2023
• Unscored —
  CVE-2023-45957

  A stored cross-site scripting (XSS) vulnerability in the component admin/AdminRequestSqlController.php of thirty bees b…

  Dec 22, 2023
• Unscored —
  CVE-2023-42465

  Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because applicati…

  sudo sudo Debian Azure Linux
  Dec 22, 2023
• Unscored —
  CVE-2023-51017

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp paramet…

  Dec 22, 2023
• Unscored —
  CVE-2023-51020

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ pa…

  Dec 22, 2023
• Critical 9.8
  CVE-2023-51707

  MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG a…

  Dec 22, 2023
• Unscored —
  CVE-2023-51016

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootSche…

  Dec 22, 2023
• Unscored —
  CVE-2023-51012

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway pa…

  Dec 22, 2023
• Unscored —
  CVE-2023-51013

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask pa…

  Dec 22, 2023
• Unscored —
  CVE-2023-51022

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ pa…

  Dec 22, 2023
• Unscored —
  CVE-2023-51033

  TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg i…

  Dec 22, 2023
• Unscored —
  CVE-2023-51019

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ param…

  Dec 22, 2023
• Critical 9.8
  CVE-2023-51018

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ para…

  Dec 22, 2023
• Unscored —
  CVE-2023-51028

  TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel p…

  Dec 22, 2023
• Unscored —
  CVE-2023-51027

  TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMod…

  Dec 22, 2023
• Unscored —
  CVE-2023-51021

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ param…

  Dec 22, 2023
• High 8.8
  CVE-2023-51034

  TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmware…

  Dec 22, 2023
• High 8.8
  CVE-2023-51014

  TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns par…

  Dec 22, 2023
• Unscored —
  CVE-2023-51026

  TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parame…

  Dec 22, 2023
• High 8.8
  CVE-2023-51025

  TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ …

  Dec 22, 2023
• Unscored —
  CVE-2023-51035

  TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost…

  Dec 22, 2023
• Unscored —
  CVE-2023-51011

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns par…

  Dec 22, 2023
• Unscored —
  CVE-2023-51024

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ paramete…

  Dec 22, 2023
• Unscored —
  CVE-2023-51023

  TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of t…

  Dec 22, 2023
• Unscored —
  CVE-2023-51704

  An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In …

  mediawiki mediawiki Debian Ubuntu
  Dec 22, 2023
• Unscored —
  CVE-2023-51713 Scanner template

  make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of-bounds read, and daemon crash, because of mishand…

  proftpd-dfsg proftpd-dfsg Debian Ubuntu
  Dec 22, 2023
• Unscored —
  CVE-2023-51708

  Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticate…

  Dec 22, 2023
• Unscored —
  CVE-2023-51015

  TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the …

  Dec 22, 2023
• High 7.0
  CVE-2023-43741

  Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability

  A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permis…

  github.com/buildkite/elastic-ci-stack-for-aws/v6 github.com/buildkite/elastic-ci-stack-for-aws/v5 github.com/buildkite/elastic-ci-stack-for-aws Go
  Dec 22, 2023
• High 7.8
  CVE-2023-43116

  Buildkite Elastic CI for AWS symbolic link following vulnerability

  A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permission…

  github.com/buildkite/elastic-ci-stack-for-aws/v6 Go
  Dec 22, 2023
• High 7.5
  CVE-2023-49391

  free5GC AMF denial of service vulnerability

  An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

  github.com/free5gc/amf Go
  Dec 22, 2023
• High 7.5
  CVE-2023-49356

  A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP…

  mp3gain Debian
  Dec 22, 2023
• Unscored —
  CVE-2022-47532

  FileRun 20220519 allows SQL Injection via the "dir" parameter in a /?module=users&section=cpanel&page=list request.

  Dec 22, 2023