Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2023-6011 Cross-Site Scripting (XSS) in dece (CVE-2023-6011)
cross-site scripting in dece (CVE-2023-6011). Risk of unauthorized operations or information disclosure.
CVE-2023-47246 KEV [KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246)
path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-41425 Cross-Site Scripting (XSS) in wondercms (CVE-2023-41425)
cross-site scripting in wondercms (CVE-2023-41425). Risk of unauthorized operations or information disclosure.
CVE-2023-5678 Vulnerability in dos (CVE-2023-5678)
vulnerability in dos (CVE-2023-5678). Risk of unauthorized operations or information disclosure.
CVE-2023-5090 Vulnerability in c (CVE-2023-5090)
vulnerability in c (CVE-2023-5090). Risk of unauthorized operations or information disclosure.
CVE-2023-46847 Vulnerability in dos (CVE-2023-46847)
vulnerability in dos (CVE-2023-46847). Risk of unauthorized operations or information disclosure.
CVE-2023-20070 Vulnerability in dos (CVE-2023-20070)
vulnerability in dos (CVE-2023-20070). Risk of unauthorized operations or information disclosure.
CVE-2023-20083 Vulnerability in dos (CVE-2023-20083)
vulnerability in dos (CVE-2023-20083). Risk of unauthorized operations or information disclosure.
CVE-2023-20095 Vulnerability in dos (CVE-2023-20095)
vulnerability in dos (CVE-2023-20095). Risk of unauthorized operations or information disclosure.
CVE-2023-20031 Vulnerability in dos (CVE-2023-20031)
vulnerability in dos (CVE-2023-20031). Risk of unauthorized operations or information disclosure.
CVE-2023-20042 Vulnerability in dos (CVE-2023-20042)
vulnerability in dos (CVE-2023-20042). Risk of unauthorized operations or information disclosure.
CVE-2023-20086 Vulnerability in dos (CVE-2023-20086)
vulnerability in dos (CVE-2023-20086). Risk of unauthorized operations or information disclosure.
CVE-2023-20177 Vulnerability in dos (CVE-2023-20177)
vulnerability in dos (CVE-2023-20177). Risk of unauthorized operations or information disclosure.
CVE-2023-20244 Vulnerability in dos (CVE-2023-20244)
vulnerability in dos (CVE-2023-20244). Risk of unauthorized operations or information disclosure.
CVE-2023-20270 Vulnerability in dos (CVE-2023-20270)
vulnerability in dos (CVE-2023-20270). Risk of unauthorized operations or information disclosure.
CVE-2023-36263 SQL Injection in sqli (CVE-2023-36263)
SQL injection in sqli (CVE-2023-36263). Successful exploitation can lead to full system takeover.
CVE-2023-5807 SQL Injection in sqli (CVE-2023-5807)
SQL injection in sqli (CVE-2023-5807). Successful exploitation can lead to full system takeover.
CVE-2023-5367 Out-of-Bounds Write in c (CVE-2023-5367)
out-of-bounds write in c (CVE-2023-5367). Successful exploitation can lead to full system takeover.
CVE-2023-5574 Use-After-Free in dos (CVE-2023-5574)
vulnerability in dos (CVE-2023-5574). Successful exploitation can lead to full system takeover.
CVE-2023-5758 Cross-Site Scripting (XSS) in mozilla (CVE-2023-5758)
cross-site scripting in mozilla (CVE-2023-5758). Risk of unauthorized operations or information disclosure.
CVE-2023-46136 Vulnerability in werkzeug (CVE-2023-46136)
vulnerability in werkzeug (CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.8` or later.
CVE-2023-45992 Cross-Site Scripting (XSS) in csrf (CVE-2023-45992)
cross-site scripting in csrf (CVE-2023-45992). Successful exploitation can lead to full system takeover.
CVE-2023-45815 Cross-Site Scripting (XSS) in archivebox (CVE-2023-45815)
cross-site scripting in archivebox (CVE-2023-45815). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
CVE-2023-45379 SQL Injection in sqli (CVE-2023-45379)
SQL injection in sqli (CVE-2023-45379). Successful exploitation can lead to full system takeover.
CVE-2022-37830 Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
CVE-2023-30148 Cross-Site Scripting (XSS) in store-opart (CVE-2023-30148)
cross-site scripting in store-opart (CVE-2023-30148). Confidential information can be exposed externally.
CVE-2023-5045 SQL Injection in sqli (CVE-2023-5045)
SQL injection in sqli (CVE-2023-5045). Successful exploitation can lead to full system takeover.
CVE-2023-5046 SQL Injection in sqli (CVE-2023-5046)
SQL injection in sqli (CVE-2023-5046). Successful exploitation can lead to full system takeover.
CVE-2023-44487 KEV [KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
CVE-2023-45199 Vulnerability in trustedfirmware (CVE-2023-45199)
vulnerability in trustedfirmware (CVE-2023-45199). Successful exploitation can lead to full system takeover.
CVE-2023-4530 SQL Injection in sqli (CVE-2023-4530)
SQL injection in sqli (CVE-2023-4530). Successful exploitation can lead to full system takeover.
CVE-2023-3576 Buffer Overflow in dos (CVE-2023-3576)
vulnerability in dos (CVE-2023-3576). Risk of unauthorized operations or information disclosure.
CVE-2023-43176 Unsafe Deserialization in deserialization (CVE-2023-43176)
vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.
CVE-2023-41446 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41446)
cross-site scripting in phpkobo (CVE-2023-41446). Risk of unauthorized operations or information disclosure.
CVE-2023-41447 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41447)
cross-site scripting in phpkobo (CVE-2023-41447). Risk of unauthorized operations or information disclosure.
CVE-2023-41448 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41448)
cross-site scripting in phpkobo (CVE-2023-41448). Risk of unauthorized operations or information disclosure.
CVE-2023-41451 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41451)
cross-site scripting in phpkobo (CVE-2023-41451). Risk of unauthorized operations or information disclosure.
CVE-2023-41453 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41453)
cross-site scripting in phpkobo (CVE-2023-41453). Risk of unauthorized operations or information disclosure.
CVE-2023-41445 Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41445)
cross-site scripting in phpkobo (CVE-2023-41445). Risk of unauthorized operations or information disclosure.
CVE-2023-4737 SQL Injection in sqli (CVE-2023-4737)
SQL injection in sqli (CVE-2023-4737). Successful exploitation can lead to full system takeover.
CVE-2023-4934 Vulnerability in usta (CVE-2023-4934)
vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.
CVE-2023-43234 Code Injection in dedebiz (CVE-2023-43234)
code injection in dedebiz (CVE-2023-43234). Successful exploitation can lead to full system takeover.
CVE-2023-43232 Cross-Site Scripting (XSS) in dedebiz (CVE-2023-43232)
cross-site scripting in dedebiz (CVE-2023-43232). Risk of unauthorized operations or information disclosure.
CVE-2023-35071 SQL Injection in sqli (CVE-2023-35071)
SQL injection in sqli (CVE-2023-35071). Successful exploitation can lead to full system takeover.
CVE-2023-43278 Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278)
vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.
CVE-2023-42426 Cross-Site Scripting (XSS) in froala (CVE-2023-42426)
cross-site scripting in froala (CVE-2023-42426). Risk of unauthorized operations or information disclosure.
CVE-2023-34576 SQL Injection in sqli (CVE-2023-34576)
SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.
CVE-2023-42456 Path Traversal in sudo-rs (CVE-2023-42456)
path traversal in sudo-rs (CVE-2023-42456). Risk of unauthorized operations or information disclosure. Exploitable via ``useradd``. Mitigation: upgrade to `0.2.1` or later.
CVE-2023-34575 SQL Injection in sqli (CVE-2023-34575)
SQL injection in sqli (CVE-2023-34575). Successful exploitation can lead to full system takeover.
CVE-2023-4853 Vulnerability in dos (CVE-2023-4853)
vulnerability in dos (CVE-2023-4853). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →