CVE-2015-10104A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown functionality of the fi…
3.5 FAIBLE
CVE-2023-2429Les versions de phpmyfaq antérieures à la 3.1.13 sont affectées par une faille dans la manière dont le logiciel contrôle l'accès à ses fonctions. Un attaquant non authentifié dispo…
9.8 CRITIQUE
CVE-2023-2428Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.
5.4 MOYENNE
CVE-2023-2426Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 9.0.1499.
5.3 MOYENNE
CVE-2023-30441L'environnement d'exécution Java d'IBM (versions 8.0.7.0 à 8.0.7.11) est affecté par une faille dans ses composants cryptographiques. Un attaquant distant peut exploiter cette vuln…
7.5 ÉLEVÉE
CVE-2023-2425A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the file /classes/Master.p…
2.4 FAIBLE
CVE-2023-2424A vulnerability was found in DedeCMS 5.7.106 and classified as critical. Affected by this issue is the function UpDateMemberModCache of the file uploads/dede/config.php. The manipu…
6.3 MOYENNE
CVE-2023-30792Anchor tag hrefs in Lexical prior to v0.10.0 would render javascript: URLs, allowing for cross-site scripting on link clicks in cases where input was being parsed from untrusted so…
6.1 MOYENNE
CVE-2022-43871IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t…
4.6 MOYENNE
CVE-2022-41736IBM Spectrum Scale Container Native Storage Access (versions 5.1.2.1 à 5.1.6.0) est susceptible de permettre une élévation de privilèges locale. Un utilisateur disposant déjà d'un …
8.4 ÉLEVÉE
CVE-2023-2421A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function of the file /v2/#/add/department. The manipulation of the arg…
3.5 FAIBLE
CVE-2023-2420A vulnerability was found in MLECMS 3.0. It has been rated as critical. This issue affects the function get_url in the library /upload/inc/lib/admin of the file upload\inc\include\…
6.3 MOYENNE
CVE-2023-2419A vulnerability was found in Zhong Bang CRMEB 4.6.0. It has been declared as critical. This vulnerability affects the function videoUpload of the file \crmeb\app\services\system\at…
4.7 MOYENNE
CVE-2023-2418A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulation leads to insuffic…
3.1 FAIBLE
CVE-2023-2417A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Fi…
5.3 MOYENNE
CVE-2023-31486Les applications Perl utilisant le module `HTTP::Tiny` sont vulnérables car le logiciel ne vérifie pas les certificats SSL/TLS par défaut. Un attaquant positionné sur le réseau ent…
8.1 ÉLEVÉE
CVE-2023-31485GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server, enabling machine-in-the-middle attacks.
5.9 MOYENNE
CVE-2023-31484CPAN.pm (versions antérieures à 2.35) ne vérifie pas les certificats SSL/TLS lors du téléchargement de modules Perl via HTTPS. Un attaquant positionné sur votre réseau pourrait eff…
8.1 ÉLEVÉE
CVE-2023-2413A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the f…
6.3 MOYENNE
CVE-2023-2412A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/user/manage_us…
6.3 MOYENNE
CVE-2023-31483Les versions de Cauldron cbang antérieures à bastet-v8.1.17 sont vulnérables à une faille de traversée de répertoire lors de l'extraction d'archives tar. Un attaquant peut utiliser…
7.5 ÉLEVÉE
CVE-2023-2411A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/vi…
6.3 MOYENNE
CVE-2023-2410A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/bookings/v…
6.3 MOYENNE
CVE-2023-2409A vulnerability, which was classified as critical, was found in SourceCodester AC Repair and Services System 1.0. This affects an unknown part of the file /admin/services/view_serv…
6.3 MOYENNE
CVE-2023-2408A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. Affected by this issue is some unknown functionality of the f…
6.3 MOYENNE
CVE-2023-2397A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown processing of the file …
2.4 FAIBLE
CVE-2023-2396A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipul…
4.3 MOYENNE
CVE-2023-2395A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation …
4.3 MOYENNE
CVE-2023-29056A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be vulnerable, XCC must be configured to use an LDAP server for…
5.3 MOYENNE
CVE-2023-25496Lenovo Driver Manager est affecté par une faille qui permet à une personne disposant d'un compte utilisateur standard sur la machine d'exécuter du code avec des privilèges de nivea…
7.8 ÉLEVÉE
CVE-2023-25495A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in cer…
4.9 MOYENNE
CVE-2023-24269Le CMS Textpattern (version 4.8.8) est affecté par une faille dans sa fonctionnalité de téléchargement de plugins. Un attaquant disposant d'un compte utilisateur avec des privilège…
8.8 ÉLEVÉE
CVE-2023-31470Les versions de SmartDNS antérieures à 56d0332 sont affectées par une faille de dépassement de tampon (buffer overflow). Un attaquant distant peut envoyer une requête DNS spécialem…
9.8 CRITIQUE
CVE-2023-31444Les installations de Talend Studio (plus précisément les versions antérieures à 7.3.1-R2022-10 et 8.0.1-R2022-09) sont affectées par l'exposition d'un point de terminaison Jolokia.…
7.5 ÉLEVÉE
CVE-2023-30858The Denosaurs emoji package provides emojis for dinosaurs. Starting in version 0.1.0 and prior to version 0.3.0, the reTrimSpace regex has 2nd degree polynomial inefficiency, leadi…
5.3 MOYENNE
CVE-2023-30857@aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`, there is a possible prototype pollution issue for the `Meta…
3.7 FAIBLE
CVE-2023-30405A cross-site scripting (XSS) vulnerability in Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inje…
5.4 MOYENNE
CVE-2023-2394A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management I…
2.4 FAIBLE
CVE-2023-2393A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/pla…
2.4 FAIBLE
CVE-2023-2392A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=time_zone.…
2.4 FAIBLE
CVE-2023-2391A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=time_zon…
2.4 FAIBLE
CVE-2023-29058A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposu…
6.4 MOYENNE
CVE-2023-29057Les systèmes Lenovo XClarity Controller (XCC) configurés pour donner la priorité aux connexions de comptes locaux par rapport au LDAP sont concernés. Un utilisateur disposant d'un …
7.3 ÉLEVÉE
CVE-2023-2390A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=time_z…
2.4 FAIBLE
CVE-2023-2389A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cgi?page=firewall_logs_…
2.4 FAIBLE
CVE-2023-2388A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of the file scgi-bin/pla…
2.4 FAIBLE
CVE-2023-26813La version 4.10 du CMS Wangmarket est affectée par une faille qui permet à un attaquant d'exécuter des commandes SQL arbitraires via l'URL d'un plugin spécifique. En envoyant une r…
9.8 CRITIQUE
CVE-2023-26812Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-26813. Reason: This record is a reservation duplicate of CVE-2023-26813. Notes: All CVE users should reference CVE…
CVE-2023-26782An issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface ->System Configuration->Cache Configuration->Cache security…
6.5 MOYENNE
CVE-2023-26781La version 2.6 de mcCMS est affectée par une faille dans la fonctionnalité de recherche des commentaires des lecteurs. Un attaquant non authentifié disposant d'un accès réseau peut…
9.8 CRITIQUE