Archive
December 2023
Vulnerabilities first published in this month (UTC), newest first.
2,697 results · Feed
-
Unscored —
Improper authorization vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to v6.0.…
-
Unscored —
The App Settings (/admin/app) page in GROWI versions prior to v6.0.6 stores sensitive information in cleartext form. As…
-
Medium 5.4
Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page, the Markdown Settings (/admin/m…
-
Unscored —
Stored cross-site scripting vulnerability when processing the MathJax exists in GROWI versions prior to v6.0.0. If this…
-
Unscored —
Stored cross-site scripting vulnerability exists in the anchor tag of GROWI versions prior to v6.0.0. If this vulnerabi…
-
Unscored —
Stored cross-site scripting vulnerability exists in the event handlers of the pre tags in GROWI versions prior to v6.0.…
-
Unscored —
Stored cross-site scripting vulnerability via the img tags exists in GROWI versions prior to v6.0.0. If this vulnerabil…
-
Unscored —
Stored cross-site scripting vulnerability which is exploiting a behavior of the XSS Filter exists in GROWI versions pri…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability exists in the User settings (/me) page of GROWI versions prior to v6.0.…
-
Medium 5.4
Stored cross-site scripting vulnerability when processing profile images exists in GROWI versions prior to v4.1.3. If t…
-
Unscored —
Stored cross-site scripting vulnerability exists in the App Settings (/admin/app) page and the Markdown Settings (/admi…
-
Unscored —
Stored cross-site scripting vulnerability exists in the User Management (/admin/users) page of GROWI versions prior to …
-
Unscored —
Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to …
-
Unscored —
PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability…
-
Unscored —
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions…
-
Medium 6.3
code-projects Library Management System index.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Library Management System 2.0. Affected is an unknown function of the file index.php. The manipulation of the argument category leads to sql injection. It is possible to launch the …
-
High 7.3
code-projects Library Management System login.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may…
-
High 7.3
code-projects Library Management System login.php sql injection
A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiate…
-
Medium 4.3
code-projects E-Commerce Website user_signup.php cross site scripting
A vulnerability classified as problematic has been found in code-projects E-Commerce Website 1.0. This affects an unknown part of the file user_signup.php. The manipulation of the argument firstname with the input <video/src=x onerror=alert(document.domain)> …
-
Unscored —
An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.…
-
Medium 5.4
OpenCRX Cross-site Scripting vulnerability
openCRX 5.2.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name field after creation of a Tracker in Manage Activity.
-
Unscored —
An open redirect through HTML injection in user messages in Asp.Net Zero before 12.3.0 allows remote attackers to redir…
-
Unscored —
resumable.php (aka PHP backend for resumable.js) 0.1.4 before 3c6dbf5 allows arbitrary file upload anywhere in the file…
-
Unscored —
SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (s…
-
Unscored —
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
-
Unscored —
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formGetDiagnose…
-
Unscored —
A floating point exception (divide-by-zero) vulnerability was discovered in mupdf 1.23.4 in function pnm_binary_read_im…
-
Unscored —
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetAutoPing.
-
Critical 9.8
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formSetUplinkInfo.
-
High 8.8CVE-2023-51092 EPSS 13%
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function upgrade.
-
Unscored —
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formexeCommand .
-
Unscored —
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function R7WebsSecurityHandler.
-
Unscored —
Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
-
Unscored —
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a command injection vulnerability via the function formSetDiagnose…
-
Unscored —
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
-
High 7.5
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in functon compute_col…
-
Unscored —
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function bmp_decomp…
-
Unscored —
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in the function fz_new…
-
Unscored —
Tenda W9 V1.0.0.7(4456)_CN was discovered to contain a stack overflow via the function formWifiMacFilterSet.
-
High 7.5
A floating point exception (divide-by-zero) vulnerability was discovered in Artifex MuPDF 1.23.4 in function pnm_binary…