Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-3652 |
|
Cross-Site Scripting (XSS) in digital-ant (CVE-2023-3652)
cross-site scripting in digital-ant (CVE-2023-3652). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3653 |
|
Cross-Site Scripting (XSS) in digital-ant (CVE-2023-3653)
cross-site scripting in digital-ant (CVE-2023-3653). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37688 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2023-37688)
cross-site scripting in sqli (CVE-2023-37688). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37689 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2023-37689)
cross-site scripting in sqli (CVE-2023-37689). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37690 |
|
Cross-Site Scripting (XSS) in sqli (CVE-2023-37690)
cross-site scripting in sqli (CVE-2023-37690). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37684 |
|
Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37684)
cross-site scripting in phpgurukul (CVE-2023-37684). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37685 |
|
Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37685)
cross-site scripting in phpgurukul (CVE-2023-37685). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37686 |
|
Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37686)
cross-site scripting in phpgurukul (CVE-2023-37686). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3716 |
|
SQL Injection in sqli (CVE-2023-3716)
SQL injection in sqli (CVE-2023-3716). Successful exploitation can lead to full system takeover.
|
| CVE-2023-37683 |
|
Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37683)
cross-site scripting in phpgurukul (CVE-2023-37683). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-37687 |
|
SQL Injection in phpgurukul (CVE-2023-37687)
SQL injection in phpgurukul (CVE-2023-37687). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3717 |
|
SQL Injection in sqli (CVE-2023-3717)
SQL injection in sqli (CVE-2023-3717). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3898 |
|
SQL Injection in sqli (CVE-2023-3898)
SQL injection in sqli (CVE-2023-3898). Successful exploitation can lead to full system takeover.
|
| CVE-2023-36158 |
|
Cross-Site Scripting (XSS) in oretnom23 (CVE-2023-36158)
cross-site scripting in oretnom23 (CVE-2023-36158). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-36159 |
|
Cross-Site Scripting (XSS) in oretnom23 (CVE-2023-36159)
cross-site scripting in oretnom23 (CVE-2023-36159). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-38951 |
|
Path Traversal in path-traversal (CVE-2023-38951)
path traversal in path-traversal (CVE-2023-38951). Successful exploitation can lead to full system takeover.
|
| CVE-2023-37679 |
|
Command Injection in nextgen (CVE-2023-37679)
command injection in nextgen (CVE-2023-37679). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38954 |
|
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
|
| CVE-2023-38956 |
|
Path Traversal in path-traversal (CVE-2023-38956)
path traversal in path-traversal (CVE-2023-38956). Confidential information can be exposed externally.
|
| CVE-2023-36081 |
|
Cross-Site Scripting (XSS) in gatesair (CVE-2023-36081)
cross-site scripting in gatesair (CVE-2023-36081). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-34552 |
|
Out-of-Bounds Write in c (CVE-2023-34552)
out-of-bounds write in c (CVE-2023-34552). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34551 |
|
Out-of-Bounds Write in c (CVE-2023-34551)
out-of-bounds write in c (CVE-2023-34551). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38559 |
|
Out-of-Bounds Read in c (CVE-2023-38559)
vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-34842 |
|
Code Injection in dedecms (CVE-2023-34842)
code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.
|
| CVE-2023-37647 |
|
SQL Injection in sqli (CVE-2023-37647)
SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.
|
| CVE-2020-22623 |
|
Path Traversal in path-traversal (CVE-2020-22623)
path traversal in path-traversal (CVE-2020-22623). Confidential information can be exposed externally.
|
| CVE-2023-35066 |
|
SQL Injection in sqli (CVE-2023-35066)
SQL injection in sqli (CVE-2023-35066). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3046 |
|
SQL Injection in sqli (CVE-2023-3046)
SQL injection in sqli (CVE-2023-3046). Successful exploitation can lead to full system takeover.
|
| CVE-2023-35078 KEV |
|
[KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078)
authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-3384 |
|
Cross-Site Scripting (XSS) in redhat (CVE-2023-3384)
cross-site scripting in redhat (CVE-2023-3384). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3019 |
|
Use-After-Free in dos (CVE-2023-3019)
vulnerability in dos (CVE-2023-3019). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3609 |
|
Use-After-Free in privilege-escalation (CVE-2023-3609)
vulnerability in privilege-escalation (CVE-2023-3609). Successful exploitation can lead to full system takeover.
|
| CVE-2023-37728 |
|
Cross-Site Scripting (XSS) in icewarp (CVE-2023-37728)
cross-site scripting in icewarp (CVE-2023-37728). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3519 KEV |
|
[KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519)
code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-30383 |
|
Vulnerability in dos (CVE-2023-30383)
vulnerability in dos (CVE-2023-30383). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2958 |
|
Vulnerability in orjinyazilim (CVE-2023-2958)
vulnerability in orjinyazilim (CVE-2023-2958). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3376 |
|
SQL Injection in sqli (CVE-2023-3376)
SQL injection in sqli (CVE-2023-3376). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2963 |
|
SQL Injection in sqli (CVE-2023-2963)
SQL injection in sqli (CVE-2023-2963). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2960 |
|
Cross-Site Scripting (XSS) in olivaekspertiz (CVE-2023-2960)
cross-site scripting in olivaekspertiz (CVE-2023-2960). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2959 |
|
Authentication Bypass in olivaekspertiz (CVE-2023-2959)
authentication bypass in olivaekspertiz (CVE-2023-2959). Confidential information can be exposed externally.
|
| CVE-2023-36884 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2023-36884)
vulnerability in Microsoft windows (CVE-2023-36884). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-35070 |
|
SQL Injection in sqli (CVE-2023-35070)
SQL injection in sqli (CVE-2023-35070). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2957 |
|
SQL Injection in sqli (CVE-2023-2957)
SQL injection in sqli (CVE-2023-2957). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1547 |
|
SQL Injection in sqli (CVE-2023-1547)
SQL injection in sqli (CVE-2023-1547). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3319 |
|
Cross-Site Scripting (XSS) in idisplay (CVE-2023-3319)
cross-site scripting in idisplay (CVE-2023-3319). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-35069 |
|
Path Traversal in path-traversal (CVE-2023-35069)
path traversal in path-traversal (CVE-2023-35069). Confidential information can be exposed externally.
|
| CVE-2020-20021 |
|
Vulnerability in dos (CVE-2020-20021)
vulnerability in dos (CVE-2020-20021). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-33161 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2023-33149 |
|
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
|
| CVE-2023-33152 |
|
Microsoft ActiveX Remote Code Execution Vulnerability
Microsoft ActiveX Remote Code Execution Vulnerability
|