Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-6011 |
|
Cross-Site Scripting (XSS) in dece (CVE-2023-6011)
cross-site scripting in dece (CVE-2023-6011). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-47246 KEV |
|
[KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246)
path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-41425 |
|
Cross-Site Scripting (XSS) in wondercms (CVE-2023-41425)
cross-site scripting in wondercms (CVE-2023-41425). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5678 |
|
Vulnerability in dos (CVE-2023-5678)
vulnerability in dos (CVE-2023-5678). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5090 |
|
Vulnerability in c (CVE-2023-5090)
vulnerability in c (CVE-2023-5090). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46847 |
|
Vulnerability in dos (CVE-2023-46847)
vulnerability in dos (CVE-2023-46847). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20070 |
|
Vulnerability in dos (CVE-2023-20070)
vulnerability in dos (CVE-2023-20070). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20083 |
|
Vulnerability in dos (CVE-2023-20083)
vulnerability in dos (CVE-2023-20083). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20095 |
|
Vulnerability in dos (CVE-2023-20095)
vulnerability in dos (CVE-2023-20095). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20031 |
|
Vulnerability in dos (CVE-2023-20031)
vulnerability in dos (CVE-2023-20031). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20042 |
|
Vulnerability in dos (CVE-2023-20042)
vulnerability in dos (CVE-2023-20042). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20086 |
|
Vulnerability in dos (CVE-2023-20086)
vulnerability in dos (CVE-2023-20086). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20177 |
|
Vulnerability in dos (CVE-2023-20177)
vulnerability in dos (CVE-2023-20177). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20244 |
|
Vulnerability in dos (CVE-2023-20244)
vulnerability in dos (CVE-2023-20244). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20270 |
|
Vulnerability in dos (CVE-2023-20270)
vulnerability in dos (CVE-2023-20270). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-36263 |
|
SQL Injection in sqli (CVE-2023-36263)
SQL injection in sqli (CVE-2023-36263). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5807 |
|
SQL Injection in sqli (CVE-2023-5807)
SQL injection in sqli (CVE-2023-5807). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5367 |
|
Out-of-Bounds Write in c (CVE-2023-5367)
out-of-bounds write in c (CVE-2023-5367). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5574 |
|
Use-After-Free in dos (CVE-2023-5574)
vulnerability in dos (CVE-2023-5574). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5758 |
|
Cross-Site Scripting (XSS) in mozilla (CVE-2023-5758)
cross-site scripting in mozilla (CVE-2023-5758). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46136 |
|
Vulnerability in werkzeug (CVE-2023-46136)
vulnerability in werkzeug (CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.8` or later.
|
| CVE-2023-45992 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2023-45992)
cross-site scripting in csrf (CVE-2023-45992). Successful exploitation can lead to full system takeover.
|
| CVE-2023-45815 |
|
Cross-Site Scripting (XSS) in archivebox (CVE-2023-45815)
cross-site scripting in archivebox (CVE-2023-45815). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2023-45379 |
|
SQL Injection in sqli (CVE-2023-45379)
SQL injection in sqli (CVE-2023-45379). Successful exploitation can lead to full system takeover.
|
| CVE-2022-37830 |
|
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
|
| CVE-2023-30148 |
|
Cross-Site Scripting (XSS) in store-opart (CVE-2023-30148)
cross-site scripting in store-opart (CVE-2023-30148). Confidential information can be exposed externally.
|
| CVE-2023-5045 |
|
SQL Injection in sqli (CVE-2023-5045)
SQL injection in sqli (CVE-2023-5045). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5046 |
|
SQL Injection in sqli (CVE-2023-5046)
SQL injection in sqli (CVE-2023-5046). Successful exploitation can lead to full system takeover.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2023-45199 |
|
Vulnerability in trustedfirmware (CVE-2023-45199)
vulnerability in trustedfirmware (CVE-2023-45199). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4530 |
|
SQL Injection in sqli (CVE-2023-4530)
SQL injection in sqli (CVE-2023-4530). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3576 |
|
Buffer Overflow in dos (CVE-2023-3576)
vulnerability in dos (CVE-2023-3576). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-43176 |
|
Unsafe Deserialization in deserialization (CVE-2023-43176)
vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.
|
| CVE-2023-41446 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41446)
cross-site scripting in phpkobo (CVE-2023-41446). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41447 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41447)
cross-site scripting in phpkobo (CVE-2023-41447). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41448 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41448)
cross-site scripting in phpkobo (CVE-2023-41448). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41451 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41451)
cross-site scripting in phpkobo (CVE-2023-41451). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41453 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41453)
cross-site scripting in phpkobo (CVE-2023-41453). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41445 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41445)
cross-site scripting in phpkobo (CVE-2023-41445). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-4737 |
|
SQL Injection in sqli (CVE-2023-4737)
SQL injection in sqli (CVE-2023-4737). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4934 |
|
Vulnerability in usta (CVE-2023-4934)
vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.
|
| CVE-2023-43234 |
|
Code Injection in dedebiz (CVE-2023-43234)
code injection in dedebiz (CVE-2023-43234). Successful exploitation can lead to full system takeover.
|
| CVE-2023-43232 |
|
Cross-Site Scripting (XSS) in dedebiz (CVE-2023-43232)
cross-site scripting in dedebiz (CVE-2023-43232). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-35071 |
|
SQL Injection in sqli (CVE-2023-35071)
SQL injection in sqli (CVE-2023-35071). Successful exploitation can lead to full system takeover.
|
| CVE-2023-43278 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278)
vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.
|
| CVE-2023-42426 |
|
Cross-Site Scripting (XSS) in froala (CVE-2023-42426)
cross-site scripting in froala (CVE-2023-42426). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-34576 |
|
SQL Injection in sqli (CVE-2023-34576)
SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.
|
| CVE-2023-42456 |
|
Path Traversal in sudo-rs (CVE-2023-42456)
path traversal in sudo-rs (CVE-2023-42456). Risk of unauthorized operations or information disclosure. Exploitable via ``useradd``. Mitigation: upgrade to `0.2.1` or later.
|
| CVE-2023-34575 |
|
SQL Injection in sqli (CVE-2023-34575)
SQL injection in sqli (CVE-2023-34575). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4853 |
|
Vulnerability in dos (CVE-2023-4853)
vulnerability in dos (CVE-2023-4853). Successful exploitation can lead to full system takeover.
|