CRITICAL Severity CVEs

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TeleP

A insecure configuration for certificate verification (http.verify_mode = OpenSSL::SSL::VERIFY_NONE) may lead to verific

OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in R

Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in R

The udpserver in H3C Magic R100 V200R004 and V100R005 has the 9034 port opened, allowing attackers to execute arbitrary

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting.

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function WanParameterSett

Tenda AX1803 v1.0.0.1_2890 was discovered to contain a command injection vulnerability via the function setipv6status.

In Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code ex

In Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code

Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expand

Tenda AC23 v16.03.07.44 was discovered to contain a buffer overflow via fromAdvSetMacMtuWan.

Tenda AC23 v16.03.07.44 is vulnerable to Stack Overflow that will allow for the execution of arbitrary code (remote).

Tenda AC23 v16.03.07.44 was discovered to contain a stack overflow via the AdvSetMacMtuWan function.

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including X

So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id , manu_v

An arbitrary file upload vulnerability in Dice v4.2.0 allows attackers to execute arbitrary code via a crafted file.

Ingredient Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at

An access control issue in Ingredient Stock Management System v1.0 allows attackers to take over user accounts via a cra

Newsletter Module v3.x was discovered to contain a SQL injection vulnerability via the zemez_newsletter_email parameter

Improper Restriction of Excessive Authentication Attempts in GitHub repository heroiclabs/nakama prior to 3.13.0. This r

The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to c

ASUS RT-A88U 3.0.0.4.386_45898 is vulnerable to Cross Site Scripting (XSS). The ASUS router admin panel does not sanitiz

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions a

The findOne function in TypeORM before 0.3.0 can either be supplied with a string or a FindOneOptions object. When input

md2roff 1.7 has a stack-based buffer overflow via a Markdown file containing a large number of consecutive characters to

PDFAlto v0.4 was discovered to contain a heap buffer overflow via the component /pdfalto/src/pdfalto.cc.

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter at orde

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doc

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adm

MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability.

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the deviceList parameter in the function formAddMac

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.loa

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials ar

A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to

A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 may send OS commands to execute on t

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA i

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access

SQL Injection vulnerability in viaviwebtech Android EBook App (Books App, PDF, ePub, Online Book Reading, Download Books

Awesome spawn contains OS command injection vulnerability, which allows execution of additional commands passed to Aweso

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server ajax endpoints functionalities of Robustel R1510 3.3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

Multiple command injection vulnerabilities exist in the web_server action endpoints functionalities of Robustel R1510 3.

A command execution vulnerability exists in the clish art2 functionality of Robustel R1510 3.3.0. A specially-crafted ne