Search vulnerabilities

Expected end of text, found ',' (at char 22), (line:1, col:23)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,877

CVE-2023-49460

libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::decode_uncompressed_image.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Struktur
Products
Libheif
CVE-2023-49448

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49447

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49446

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Jfinalcms Project
Products
Jfinalcms
CVE-2023-49444

An arbitrary file upload vulnerability in DoraCMS v2.1.8 allow attackers to execute arbitrary code via uploading a crafted HTML or image file to the user avatar.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Html-js
Products
Doracms
CVE-2023-49443

DoraCMS v2.1.8 was discovered to re-use the same code for verification of valid usernames and passwords. This vulnerability allows attackers to gain access to the application via a bruteforce attack.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Html-js
Products
Doracms
CVE-2023-49436

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'list' parameter at /goform/SetNetControlList.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49434

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49433

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49431

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49430

Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules.

CVSS 3.1 · 9.8 Critical EPSS 2.4% KEV · Not listed
Vendors
Tenda
Products
Ax9 Ax9 Firmware
CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName.

CVSS 3.1 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49426

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49425

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg .

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49424

Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ax12 Ax12 Firmware
CVE-2023-49411

Tenda W30E V16.01.0.12(4843) contains a stack overflow vulnerability via the function formDeleteMeshNode.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware
CVE-2023-49410

Tenda W30E V16.01.0.12(4843) was discovered to contain a stack overflow via the function via the function set_wan_status.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
W30e W30e Firmware