Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2023-3652 Cross-Site Scripting (XSS) in digital-ant (CVE-2023-3652)
cross-site scripting in digital-ant (CVE-2023-3652). Risk of unauthorized operations or information disclosure.
CVE-2023-3653 Cross-Site Scripting (XSS) in digital-ant (CVE-2023-3653)
cross-site scripting in digital-ant (CVE-2023-3653). Risk of unauthorized operations or information disclosure.
CVE-2023-37688 Cross-Site Scripting (XSS) in sqli (CVE-2023-37688)
cross-site scripting in sqli (CVE-2023-37688). Risk of unauthorized operations or information disclosure.
CVE-2023-37689 Cross-Site Scripting (XSS) in sqli (CVE-2023-37689)
cross-site scripting in sqli (CVE-2023-37689). Risk of unauthorized operations or information disclosure.
CVE-2023-37690 Cross-Site Scripting (XSS) in sqli (CVE-2023-37690)
cross-site scripting in sqli (CVE-2023-37690). Risk of unauthorized operations or information disclosure.
CVE-2023-37684 Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37684)
cross-site scripting in phpgurukul (CVE-2023-37684). Risk of unauthorized operations or information disclosure.
CVE-2023-37685 Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37685)
cross-site scripting in phpgurukul (CVE-2023-37685). Risk of unauthorized operations or information disclosure.
CVE-2023-37686 Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37686)
cross-site scripting in phpgurukul (CVE-2023-37686). Risk of unauthorized operations or information disclosure.
CVE-2023-3716 SQL Injection in sqli (CVE-2023-3716)
SQL injection in sqli (CVE-2023-3716). Successful exploitation can lead to full system takeover.
CVE-2023-37683 Cross-Site Scripting (XSS) in phpgurukul (CVE-2023-37683)
cross-site scripting in phpgurukul (CVE-2023-37683). Risk of unauthorized operations or information disclosure.
CVE-2023-37687 SQL Injection in phpgurukul (CVE-2023-37687)
SQL injection in phpgurukul (CVE-2023-37687). Successful exploitation can lead to full system takeover.
CVE-2023-3717 SQL Injection in sqli (CVE-2023-3717)
SQL injection in sqli (CVE-2023-3717). Successful exploitation can lead to full system takeover.
CVE-2023-3898 SQL Injection in sqli (CVE-2023-3898)
SQL injection in sqli (CVE-2023-3898). Successful exploitation can lead to full system takeover.
CVE-2023-36158 Cross-Site Scripting (XSS) in oretnom23 (CVE-2023-36158)
cross-site scripting in oretnom23 (CVE-2023-36158). Risk of unauthorized operations or information disclosure.
CVE-2023-36159 Cross-Site Scripting (XSS) in oretnom23 (CVE-2023-36159)
cross-site scripting in oretnom23 (CVE-2023-36159). Risk of unauthorized operations or information disclosure.
CVE-2023-38951 Path Traversal in path-traversal (CVE-2023-38951)
path traversal in path-traversal (CVE-2023-38951). Successful exploitation can lead to full system takeover.
CVE-2023-37679 Command Injection in nextgen (CVE-2023-37679)
command injection in nextgen (CVE-2023-37679). Successful exploitation can lead to full system takeover.
CVE-2023-38954 ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
ZKTeco BioAccess IVS v3.3.1 was discovered to contain a SQL injection vulnerability.
CVE-2023-38956 Path Traversal in path-traversal (CVE-2023-38956)
path traversal in path-traversal (CVE-2023-38956). Confidential information can be exposed externally.
CVE-2023-36081 Cross-Site Scripting (XSS) in gatesair (CVE-2023-36081)
cross-site scripting in gatesair (CVE-2023-36081). Risk of unauthorized operations or information disclosure.
CVE-2023-34552 Out-of-Bounds Write in c (CVE-2023-34552)
out-of-bounds write in c (CVE-2023-34552). Successful exploitation can lead to full system takeover.
CVE-2023-34551 Out-of-Bounds Write in c (CVE-2023-34551)
out-of-bounds write in c (CVE-2023-34551). Successful exploitation can lead to full system takeover.
CVE-2023-38559 Out-of-Bounds Read in c (CVE-2023-38559)
vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.
CVE-2023-34842 Code Injection in dedecms (CVE-2023-34842)
code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.
CVE-2023-37647 SQL Injection in sqli (CVE-2023-37647)
SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.
CVE-2020-22623 Path Traversal in path-traversal (CVE-2020-22623)
path traversal in path-traversal (CVE-2020-22623). Confidential information can be exposed externally.
CVE-2023-35066 SQL Injection in sqli (CVE-2023-35066)
SQL injection in sqli (CVE-2023-35066). Successful exploitation can lead to full system takeover.
CVE-2023-3046 SQL Injection in sqli (CVE-2023-3046)
SQL injection in sqli (CVE-2023-3046). Successful exploitation can lead to full system takeover.
CVE-2023-35078 KEV [KEV] Authentication Bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078)
authentication bypass in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35078). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-3384 Cross-Site Scripting (XSS) in redhat (CVE-2023-3384)
cross-site scripting in redhat (CVE-2023-3384). Risk of unauthorized operations or information disclosure.
CVE-2023-3019 Use-After-Free in dos (CVE-2023-3019)
vulnerability in dos (CVE-2023-3019). Risk of unauthorized operations or information disclosure.
CVE-2023-3609 Use-After-Free in privilege-escalation (CVE-2023-3609)
vulnerability in privilege-escalation (CVE-2023-3609). Successful exploitation can lead to full system takeover.
CVE-2023-37728 Cross-Site Scripting (XSS) in icewarp (CVE-2023-37728)
cross-site scripting in icewarp (CVE-2023-37728). Risk of unauthorized operations or information disclosure.
CVE-2023-3519 KEV [KEV] Code Injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519)
code injection in Citrix netscaler-adc-and-netscaler-gateway (CVE-2023-3519). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-30383 Vulnerability in dos (CVE-2023-30383)
vulnerability in dos (CVE-2023-30383). Risk of unauthorized operations or information disclosure.
CVE-2023-2958 Vulnerability in orjinyazilim (CVE-2023-2958)
vulnerability in orjinyazilim (CVE-2023-2958). Successful exploitation can lead to full system takeover.
CVE-2023-3376 SQL Injection in sqli (CVE-2023-3376)
SQL injection in sqli (CVE-2023-3376). Successful exploitation can lead to full system takeover.
CVE-2023-2963 SQL Injection in sqli (CVE-2023-2963)
SQL injection in sqli (CVE-2023-2963). Successful exploitation can lead to full system takeover.
CVE-2023-2960 Cross-Site Scripting (XSS) in olivaekspertiz (CVE-2023-2960)
cross-site scripting in olivaekspertiz (CVE-2023-2960). Risk of unauthorized operations or information disclosure.
CVE-2023-2959 Authentication Bypass in olivaekspertiz (CVE-2023-2959)
authentication bypass in olivaekspertiz (CVE-2023-2959). Confidential information can be exposed externally.
CVE-2023-36884 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-36884)
vulnerability in Microsoft windows (CVE-2023-36884). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-35070 SQL Injection in sqli (CVE-2023-35070)
SQL injection in sqli (CVE-2023-35070). Successful exploitation can lead to full system takeover.
CVE-2023-2957 SQL Injection in sqli (CVE-2023-2957)
SQL injection in sqli (CVE-2023-2957). Successful exploitation can lead to full system takeover.
CVE-2023-1547 SQL Injection in sqli (CVE-2023-1547)
SQL injection in sqli (CVE-2023-1547). Successful exploitation can lead to full system takeover.
CVE-2023-3319 Cross-Site Scripting (XSS) in idisplay (CVE-2023-3319)
cross-site scripting in idisplay (CVE-2023-3319). Risk of unauthorized operations or information disclosure.
CVE-2023-35069 Path Traversal in path-traversal (CVE-2023-35069)
path traversal in path-traversal (CVE-2023-35069). Confidential information can be exposed externally.
CVE-2020-20021 Vulnerability in dos (CVE-2020-20021)
vulnerability in dos (CVE-2020-20021). Risk of unauthorized operations or information disclosure.
CVE-2023-33161 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33149 Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability
Microsoft ActiveX Remote Code Execution Vulnerability

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →