Critical Severity Vulnerabilities

Found 1499 vulnerabilities at Critical severity.

Vulnerability Name

CVE

CWE

Severity

WebLogic CVE-2023-22089 Vulnerability (CVE-2023-22089)

CVE-2023-22089

-

Critical

Atlassian Confluence CVE-2023-22515 Vulnerability (CVE-2023-22515)

CVE-2023-22515

-

Critical

Atlassian Confluence Incorrect Authorization Vulnerability (CVE-2023-22518)

CVE-2023-22518

CWE-863

Critical

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22527)

CVE-2023-22527

CWE-138

Critical

CakePHP Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-22727)

CVE-2023-22727

CWE-138

Critical

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-25690)

CVE-2023-25690

-

Critical

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-26477)

CVE-2023-26477

CWE-94

Critical

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-27479)

CVE-2023-27479

CWE-138

Critical

Envoy Proxy CVE-2023-27487 Vulnerability (CVE-2023-27487)

CVE-2023-27487

-

Critical

Envoy Proxy CVE-2023-27488 Vulnerability (CVE-2023-27488)

CVE-2023-27488

-

Critical

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27491)

CVE-2023-27491

-

Critical

Envoy Proxy Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27493)

CVE-2023-27493

-

Critical

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-27898)

CVE-2023-27898

CWE-707

Critical

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-28333)

CVE-2023-28333

CWE-94

Critical

MediaWiki CVE-2023-29141 Vulnerability (CVE-2023-29141)

CVE-2023-29141

-

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29201)

CVE-2023-29201

CWE-707

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29202)

CVE-2023-29202

CWE-707

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-29207)

CVE-2023-29207

CWE-707

Critical

SharePoint CVE-2023-29357 Vulnerability (CVE-2023-29357)

CVE-2023-29357

-

Critical

phpMyFAQ Improper Access Control Vulnerability (CVE-2023-2429)

CVE-2023-2429

CWE-284

Critical

PrestaShop Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-30838)

CVE-2023-30838

CWE-707

Critical

Django Improper Input Validation Vulnerability (CVE-2023-31047)

CVE-2023-31047

CWE-20

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31126)

CVE-2023-31126

CWE-707

Critical

CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)

CVE-2023-31541

CWE-434

Critical

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-31672)

CVE-2023-31672

CWE-138

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-32071)

CVE-2023-32071

CWE-707

Critical

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33361)

CVE-2023-33361

CWE-138

Critical

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-33362)

CVE-2023-33362

CWE-138

Critical

Apache Traffic Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-33934)

CVE-2023-33934

-

Critical

GibbonEdu Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-34598)

CVE-2023-34598

CWE-22

Critical

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-34944)

CVE-2023-34944

CWE-434

Critical

Chamilo Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2023-34960)

CVE-2023-34960

CWE-138

Critical

GeoServer CVE-2023-35042 Vulnerability (CVE-2023-35042)

CVE-2023-35042

-

Critical

Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2023-35941)

CVE-2023-35941

CWE-116

Critical

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-36217)

CVE-2023-36217

CWE-707

Critical

XWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2023-37277)

CVE-2023-37277

CWE-352

Critical

MediaWiki CVE-2023-37303 Vulnerability (CVE-2023-37303)

CVE-2023-37303

-

Critical

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-38888)

CVE-2023-38888

CWE-707

Critical

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39524)

CVE-2023-39524

CWE-138

Critical

PrestaShop Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-39525)

CVE-2023-39525

CWE-22

Critical

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-39526)

CVE-2023-39526

CWE-138

Critical

PrestaShop CVE-2023-39529 Vulnerability (CVE-2023-39529)

CVE-2023-39529

-

Critical

PrestaShop Improper Input Validation Vulnerability (CVE-2023-39530)

CVE-2023-39530

CWE-20

Critical

Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2023-3128)

CVE-2023-3128

CWE-290

Critical

Chamilo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2023-3368)

CVE-2023-3368

CWE-138

Critical

Chamilo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-3533)

CVE-2023-3533

CWE-22

Critical

Chamilo Improper Handling of Case Sensitivity Vulnerability (CVE-2023-3545)

CVE-2023-3545

CWE-178

Critical

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-3550)

CVE-2023-3550

CWE-707

Critical

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2023-3824)

CVE-2023-3824

CWE-119

Critical

Opencart Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2023-40834)

CVE-2023-40834

CWE-307

Critical

Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-41892)

CVE-2023-41892

CWE-94

Critical

CrushFTP Server Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2023-43177)

CVE-2023-43177

CWE-913

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45134)

CVE-2023-45134

CWE-707

Critical

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45136)

CVE-2023-45136

CWE-707

Critical

qdPM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-45856)

CVE-2023-45856

CWE-434

Critical

GibbonEdu CVE-2023-45878 Vulnerability (CVE-2023-45878)

CVE-2023-45878

-

Critical

XWiki Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-46731)

CVE-2023-46731

CWE-94

Critical

OpenVPN AS Use After Free Vulnerability (CVE-2023-46850)

CVE-2023-46850

CWE-416

Critical

Perl Improper Handling of Exceptional Conditions Vulnerability (CVE-2023-47100)

CVE-2023-47100

CWE-755

Critical

WeBid Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47397)

CVE-2023-47397

CWE-94

Critical

ownCloud Improper Authentication Vulnerability (CVE-2023-49105)

CVE-2023-49105

CWE-287

Critical

phpMyFAQ Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2023-4006)

CVE-2023-4006

CWE-1236

Critical

phpMyFAQ Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-5227)

CVE-2023-5227

CWE-434

Critical

Moodle Other Vulnerability (CVE-2023-5550)

CVE-2023-5550

-

Critical

phpMyFAQ Insufficient Session Expiration Vulnerability (CVE-2023-5865)

CVE-2023-5865

CWE-613

Critical

Wordpress Plugin Backup Migration CVE-2023-6553 Vulnerability (CVE-2023-6553)

CVE-2023-6553

-

Critical

osCommerce Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2023-6579)

CVE-2023-6579

CWE-138

Critical

Wordpress Plugin Backup Migration Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2023-6971)

CVE-2023-6971

CWE-829

Critical

Wordpress Plugin Backup Migration Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-6972)

CVE-2023-6972

CWE-22

Critical

Sqlite Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2023-7104)

CVE-2023-7104

CWE-119

Critical

Pega Infinity Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-10094)

CVE-2024-10094

CWE-94

Critical

PHP Integer Overflow or Wraparound Vulnerability (CVE-2024-11236)

CVE-2024-11236

CWE-190

Critical

ProjectSend Incorrect Authorization Vulnerability (CVE-2024-11680)

CVE-2024-11680

CWE-863

Critical

WordPress Ultimate Member Plugin Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-1071)

CVE-2024-1071

CWE-138

Critical

MongoDb Improper Certificate Validation Vulnerability (CVE-2024-1351)

CVE-2024-1351

CWE-295

Critical