Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
38,964 results · page 368 of 780
Dec 14, 2023Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attCVE-2023-46141 · Other software · PHOENIX CONTACT · reported by info@cert.vde.comCritical 9.8
Incorrect Permission Assignment for Critical Resource vulnerability in multiple products of the PHOENIX CONTACT classic line allow an remote unauthenticated attacker to gain full access of the affected device.
- Product
- Automation Worx Software Suite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Dec 14, 2023Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated CVE-2023-0757 · Other software · PHOENIX CONTACT · reported by info@cert.vde.comCritical 9.8
Incorrect Permission Assignment for Critical Resource vulnerability in PHOENIX CONTACT MULTIPROG, PHOENIX CONTACT ProConOS eCLR (SDK) allows an unauthenticated remote attacker to upload arbitrary malicious code and gain full access on the affected device.
- Product
- MULTIPROG
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert.vde.comcert.vde.com
Dec 14, 2023SQLi vulnerability in Starshop component for Joomla.CVE-2023-49708 · Other software · Joomstar.com · reported by security@joomla.orgCritical 9.8
SQLi vulnerability in Starshop component for Joomla.
- Product
- Starshop component for Joomla
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordextensions.joomla.orgextensions.joomla.org
Dec 14, 2023SQLi vulnerability in S5 Register module for Joomla.CVE-2023-49707 · Websites & servers · joomlart.com · reported by security@joomla.orgCritical 9.8
SQLi vulnerability in S5 Register module for Joomla.
- Product
- S5 Register module for Joomla
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordextensions.joomla.orgextensions.joomla.org
Dec 14, 2023SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the compCVE-2023-48925 · Other software · Buy-addons · reported by MITRECritical 9.8
SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privileges and obtain sensitive information via the component BaVideoTabSaveVideoModuleFrontController::run().
- Product
- Bavideotab
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Dec 14, 2023SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookAcCVE-2023-46348 · Other software · Sunnytoo · reported by MITRECritical 9.8
SQL njection vulnerability in SunnyToo sturls before version 1.1.13, allows attackers to escalate privileges and obtain sensitive information via StUrls::hookActionDispatcher and StUrls::getInstanceId methods.
- Product
- Sturls
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Dec 14, 2023Unauthenticated LFI/SSRF in JCDashboards component for Joomla.CVE-2023-40630 · Other software · joomcode.com · reported by security@joomla.orgCritical 9.8
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.
- Product
- JCDashboards component for Joomla
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordextensions.joomla.orgextensions.joomla.org
Dec 14, 2023SQLi vulnerability in LMS Lite component for Joomla.CVE-2023-40629 · Other software · king-products.net · reported by security@joomla.orgCritical 9.8
SQLi vulnerability in LMS Lite component for Joomla.
- Product
- LMS Lite component for Joomla
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordextensions.joomla.orgextensions.joomla.org
Dec 14, 2023Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.CVE-2023-48085 · Other software · Nagios · reported by MITRECritical 9.8
Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.
- Product
- Nagios XI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2023Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.CVE-2023-48084 · Other software · Nagios · reported by MITRECritical 9.8
Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.
- Product
- Nagios XI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 14, 2023PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvg_load_from_memory.CVE-2023-44709 · Other software · Sammycage · reported by MITRECritical 9.8
PlutoSVG commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before was discovered to contain an integer overflow via the component plutosvg_load_from_memory.
- Product
- Plutosvg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Dec 14, 2023An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x.CVE-2023-49937 · Other software · Schedmd · reported by MITRECritical 9.8
An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. Because of a double free, attackers can cause a denial of service or possibly execute arbitrary code. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.
- Product
- Slurm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.fedoraproject.orglists.fedoraproject.org
Dec 14, 2023An issue was discovered in SchedMD Slurm 23.11.x.CVE-2023-49934 · Other software · Schedmd · reported by MITRECritical 9.8
An issue was discovered in SchedMD Slurm 23.11.x. There is SQL Injection against the SlurmDBD database. The fixed version is 23.11.1.
- Product
- Slurm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.fedoraproject.orglists.fedoraproject.org
Dec 13, 2023Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.CVE-2023-31546 · Other software · Dedebiz · reported by MITRECritical 9.6
Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.
- Product
- Dedebiz
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2023SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the latCVE-2023-40921 · Other software · Common-services · reported by MITRECritical 9.8
SQL Injection vulnerability in functions/point_list.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters.
- Product
- Soliberte
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.friendsofpresta.orgsecurity.friendsofpresta.org
Dec 13, 2023Rockoa <2.3.3 is vulnerable to SQL Injection.CVE-2023-49363 · Other software · Rockoa · reported by MITRECritical 9.8
Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in reimpAction.php.
- Product
- Rockoa
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2023 Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-42495 · Other software · Dasan Networks · reported by cna@cyber.gov.ilCritical 9.8
Dasan Networks - W-Web versions 1.22-1.27 - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- Product
- Dasan Networks
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2023An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload fuCVE-2023-6723 · Other software · Repox · reported by cve-coordination@incibe.esCritical 10
An unrestricted file upload vulnerability has been identified in Repbox, which allows an attacker to upload malicious files via the transforamationfileupload function, due to the lack of proper file type validation controls, resulting in a full system compromise.
- Product
- Repox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2023An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authCVE-2023-6718 · Other software · Repox · reported by cve-coordination@incibe.esCritical 9.4
An authentication bypass vulnerability has been found in Repox, which allows a remote user to send a specially crafted POST request, due to the lack of any authentication method, resulting in the alteration or creation of users.
- Product
- Repox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2023An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.CVE-2023-47577 · Other software · Relyum · reported by MITRECritical 9.8
An issue discovered in Relyum RELY-PCIe 22.2.1 and RELY-REC 23.1.0 allows for unauthorized password changes due to no check for current password.
- Product
- Rely-pcie Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2023main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.CVE-2023-43364 · Other software · Arjunsharda · reported by MITRECritical 9.8
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.
- Product
- Searchor
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2023Microsoft Power Platform Connector Spoofing VulnerabilityCVE-2023-36019 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.6
Microsoft Power Platform Connector Spoofing Vulnerability
- Product
- Microsoft Power Platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Dec 12, 2023The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file.CVE-2013-2513 · Other software · Milboj · reported by MITRECritical 9.8
The flash_tool gem through 0.6.0 for Ruby allows command execution via shell metacharacters in the name of a downloaded file.
- Product
- Flash Tool
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2023 Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to exeCVE-2023-6593 · Other software · Devolutions · reported by security@devolutions.netCritical 9.8
Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction.
- Product
- Remote Desktop Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevolutions.netdevolutions.net
Dec 12, 2023In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.CVE-2023-46456 · Other software · Gl-inet · reported by MITRECritical 9.8
In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload functionality.
- Product
- Gl-ar300m Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberaz0r.infogl-inet.com
Dec 12, 2023In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information fCVE-2023-46454 · Other software · Gl-inet · reported by MITRECritical 9.8
In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the package information functionality.
- Product
- Gl-ar300m Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcyberaz0r.infocyberaz0r.info
Dec 11, 2023SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, allow under certain conditions an escalatiCVE-2023-50424 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.1
SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions < 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
- Product
- github.com/sap/cloud-security-client-go
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblogs.sap.comgithub.com
Dec 11, 2023SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges.CVE-2023-50423 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.1
SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
- Product
- sap-xssec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblogs.sap.comgithub.com
Dec 11, 2023SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3CVE-2023-50422 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.1
SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
- Product
- cloud-security-services-integration-library
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblogs.sap.comgithub.com
Dec 11, 2023SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges.CVE-2023-49583 · Network & remote access · SAP_SE · reported by cna@sap.comCritical 9.1
SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
- Product
- @sap/xssec
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblogs.sap.comme.sap.com
Dec 11, 2023Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other userCVE-2023-36649 · Other software · Prolion · reported by MITRECritical 9.1
Insertion of sensitive information in the centralized (Grafana) logging system in ProLion CryptoSpike 3.0.15P2 allows remote attackers to impersonate other users in web management and the REST API by reading JWT tokens from logs (as a Granafa authenticated user) or from the Loki REST API without authentication.
- Product
- Cryptospike
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcvcn.gov.itcvcn.gov.it
Dec 11, 2023OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing.CVE-2023-50245 · Other software · afichet · reported by GitHubCritical 9.8
OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1.
- Product
- openexr-viewer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2023TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.CVE-2023-49418 · Other software · Totolink · reported by MITRECritical 9.8
TOTOLink A7000R V9.1.0u.6115_B20201022has a stack overflow vulnerability via setIpPortFilterRules.
- Product
- A7000r Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2023TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.CVE-2023-49417 · Other software · Totolink · reported by MITRECritical 9.8
TOTOLink A7000R V9.1.0u.6115_B20201022 has a stack overflow vulnerability via setOpModeCfg.
- Product
- A7000r Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2023An oversight in BCB handling of reboot reason that allows for persistent code executionCVE-2023-6181 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
An oversight in BCB handling of reboot reason that allows for persistent code execution
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 11, 2023U-Boot vulnerability resulting in persistent Code Execution CVE-2023-48425 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
U-Boot vulnerability resulting in persistent Code Execution
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 11, 2023U-Boot shell vulnerability resulting in Privilege escalation in a production deviceCVE-2023-48424 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
U-Boot shell vulnerability resulting in Privilege escalation in a production device
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 11, 2023Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity ApplicationCVE-2023-48417 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
Missing Permission checks resulting in unauthorized access and Manipulation in KeyChainActivity Application
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 9, 2023IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.CVE-2023-50429 · Other software · Izybat · reported by MITRECritical 9.1
IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection.
- Product
- Orange Casiers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2023An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privilCVE-2023-47254 · Network & remote access · Draytek · reported by MITRECritical 9.8
An OS Command Injection in the CLI interface on DrayTek Vigor167 version 5.2.2, allows remote attackers to execute arbitrary system commands and escalate privileges via any account created within the web interface.
- Product
- Vigor167 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 9, 2023Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DCVE-2023-46932 · Other software · Gpac · reported by MITRECritical 9.8
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong class in src/media_tools/avilib.c in gpac/MP4Box.
- Product
- Gpac
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2023An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomeCVE-2023-46498 · Other software · Evershop · reported by MITRECritical 9.8
An issue in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information and execute arbitrary code via the /deleteCustomer/route.json file.
- Product
- Evershop
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevhub.checkmarx.comdevhub.checkmarx.com
Dec 8, 2023In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check.CVE-2023-48423 · Computers, phones & browsers · Google · reported by dsap-vuln-management@google.comCritical 9.8
In dhcp4_SetPDNAddress of dhcp4_Main.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Dec 8, 2023DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords.CVE-2023-49443 · Other software · Html-js · reported by MITRECritical 9.8
DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.
- Product
- Doracms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2023In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.CVE-2023-49007 · Network & remote access · Netgear · reported by MITRECritical 9.8
In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd.
- Product
- Rbr750 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 8, 2023Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation.CVE-2023-48929 · Other software · Franklin-electric · reported by MITRECritical 9.8
Franklin Fueling Systems System Sentinel AnyWare (SSA) version 1.6.24.492 is vulnerable to Session Fixation. The 'sid' parameter in the group_status.asp resource allows an attacker to escalate privileges and obtain sensitive information.
- Product
- System Sentinel Anyware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 2023An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 CVE-2023-43742 · Other software · Zultys · reported by MITRECritical 9.8
An authentication bypass in Zultys MX-SE, MX-SE II, MX-E, MX-Virtual, MX250, and MX30 with firmware versions prior to 17.0.10 patch 17161 and 16.04 patch 16109 allows an unauthenticated attacker to obtain an administrative session via a protection mechanism failure in the authentication function. In normal operation, the Zultys MX Administrator Windows client connects to port 7505 and attempts authentication, submitting the administrator username and password to the server. Upon authentication failure, the server sends a login failure message prompting the client to disconnect. However, if the client ignores the failure message instead and attempts to continue, the server does not forcibly close the connection and processes all subsequent requests from the client as if authentication had been successful.
- Product
- Mx-se Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 7, 2023Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an externalCVE-2023-5008 · Other software · Kashipara Group · reported by help@fluidattacks.comCritical 9.8
Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.
- Product
- Student Information System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfluidattacks.comkashipara.com
Dec 7, 2023Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated atCVE-2023-4122 · Other software · Kashipara Group · reported by help@fluidattacks.comCritical 9.9
Student Information System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'photo' parameter of my-profile page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting the application.
- Product
- Student Information System
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordfluidattacks.comkashipara.com
Dec 7, 2023Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-35618 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comCritical 9.6
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- Product
- Microsoft Edge (Chromium-based)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.