Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: attack-types Clear
ID Title
CVE-2023-31799 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31799)
cross-site scripting in chamilo (CVE-2023-31799). Risk of unauthorized operations or information disclosure.
CVE-2023-31800 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31800)
cross-site scripting in chamilo (CVE-2023-31800). Risk of unauthorized operations or information disclosure.
CVE-2023-31801 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31801)
cross-site scripting in chamilo (CVE-2023-31801). Risk of unauthorized operations or information disclosure.
CVE-2023-31802 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31802)
cross-site scripting in chamilo (CVE-2023-31802). Risk of unauthorized operations or information disclosure.
CVE-2023-31803 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31803)
cross-site scripting in chamilo (CVE-2023-31803). Risk of unauthorized operations or information disclosure.
CVE-2023-31804 Cross-Site Scripting (XSS) in chamilo (CVE-2023-31804)
cross-site scripting in chamilo (CVE-2023-31804). Risk of unauthorized operations or information disclosure.
CVE-2023-30086 Out-of-Bounds Write in c (CVE-2023-30086)
out-of-bounds write in c (CVE-2023-30086). Risk of unauthorized operations or information disclosure.
CVE-2023-30243 SQL Injection in sqli (CVE-2023-30243)
SQL injection in sqli (CVE-2023-30243). Confidential information can be exposed externally.
CVE-2023-30242 SQL Injection in sqli (CVE-2023-30242)
SQL injection in sqli (CVE-2023-30242). Successful exploitation can lead to full system takeover.
CVE-2023-2235 Use-After-Free in privilege-escalation (CVE-2023-2235)
vulnerability in privilege-escalation (CVE-2023-2235). Successful exploitation can lead to full system takeover.
CVE-2023-27973 Out-of-Bounds Write in hp (CVE-2023-27973)
out-of-bounds write in hp (CVE-2023-27973). Successful exploitation can lead to full system takeover.
CVE-2023-27972 Vulnerability in hp (CVE-2023-27972)
vulnerability in hp (CVE-2023-27972). Successful exploitation can lead to full system takeover.
CVE-2023-25292 Cross-Site Scripting (XSS) in group-office (CVE-2023-25292)
cross-site scripting in group-office (CVE-2023-25292). Risk of unauthorized operations or information disclosure.
CVE-2022-27979 Cross-Site Scripting (XSS) in tooljet (CVE-2022-27979)
cross-site scripting in tooljet (CVE-2022-27979). Risk of unauthorized operations or information disclosure.
CVE-2023-30404 Code Injection in aigital (CVE-2023-30404)
code injection in aigital (CVE-2023-30404). Successful exploitation can lead to full system takeover.
CVE-2023-30798 Vulnerability in starlette (CVE-2023-30798)
vulnerability in starlette (CVE-2023-30798). Risk of unauthorized operations or information disclosure. Exploitable via ``MultipartParser``. Mitigation: upgrade to `0.25.0` or later.
CVE-2023-2206 SQL Injection in sqli (CVE-2023-2206)
SQL injection in sqli (CVE-2023-2206). Risk of unauthorized operations or information disclosure.
CVE-2023-2207 SQL Injection in sqli (CVE-2023-2207)
SQL injection in sqli (CVE-2023-2207). Risk of unauthorized operations or information disclosure.
CVE-2023-2208 SQL Injection in sqli (CVE-2023-2208)
SQL injection in sqli (CVE-2023-2208). Risk of unauthorized operations or information disclosure.
CVE-2023-2204 SQL Injection in sqli (CVE-2023-2204)
SQL injection in sqli (CVE-2023-2204). Risk of unauthorized operations or information disclosure.
CVE-2023-2205 SQL Injection in sqli (CVE-2023-2205)
SQL injection in sqli (CVE-2023-2205). Risk of unauthorized operations or information disclosure.
CVE-2023-1873 SQL Injection in sqli (CVE-2023-1873)
SQL injection in sqli (CVE-2023-1873). Successful exploitation can lead to full system takeover.
CVE-2023-1723 SQL Injection in sqli (CVE-2023-1723)
SQL injection in sqli (CVE-2023-1723). Successful exploitation can lead to full system takeover.
CVE-2023-1833 Vulnerability in redline (CVE-2023-1833)
vulnerability in redline (CVE-2023-1833). Successful exploitation can lead to full system takeover.
CVE-2023-1803 Vulnerability in redline (CVE-2023-1803)
vulnerability in redline (CVE-2023-1803). Successful exploitation can lead to full system takeover.
CVE-2023-27666 Cross-Site Scripting (XSS) in auto-dealer-management-system-project (CVE-2023-27666)
cross-site scripting in auto-dealer-management-system-project (CVE-2023-27666). Risk of unauthorized operations or information disclosure.
CVE-2023-1863 SQL Injection in sqli (CVE-2023-1863)
SQL injection in sqli (CVE-2023-1863). Successful exploitation can lead to full system takeover.
CVE-2023-27667 Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.
CVE-2023-27779 SQL Injection in sqli (CVE-2023-27779)
SQL injection in sqli (CVE-2023-27779). Successful exploitation can lead to full system takeover.
CVE-2023-1829 Use-After-Free in privilege-escalation (CVE-2023-1829)
vulnerability in privilege-escalation (CVE-2023-1829). Successful exploitation can lead to full system takeover.
CVE-2023-24721 Cross-Site Scripting (XSS) in liveaction (CVE-2023-24721)
cross-site scripting in liveaction (CVE-2023-24721). Risk of unauthorized operations or information disclosure.
CVE-2023-1726 Cross-Site Scripting (XSS) in prolizyazilim (CVE-2023-1726)
cross-site scripting in prolizyazilim (CVE-2023-1726). Risk of unauthorized operations or information disclosure.
CVE-2023-22985 Cross-Site Scripting (XSS) in simple-guestbook-management-system-project (CVE-2023-22985)
cross-site scripting in simple-guestbook-management-system-project (CVE-2023-22985). Risk of unauthorized operations or information disclosure.
CVE-2023-1765 SQL Injection in sqli (CVE-2023-1765)
SQL injection in sqli (CVE-2023-1765). Successful exploitation can lead to full system takeover.
CVE-2023-1766 Cross-Site Scripting (XSS) in akbim (CVE-2023-1766)
cross-site scripting in akbim (CVE-2023-1766). Risk of unauthorized operations or information disclosure.
CVE-2023-27162 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27162)
SSRF in ssrf (CVE-2023-27162). Confidential information can be exposed externally.
CVE-2023-27163 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27163)
SSRF in ssrf (CVE-2023-27163). Confidential information can be exposed externally.
CVE-2023-27159 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27159)
SSRF in ssrf (CVE-2023-27159). Confidential information can be exposed externally.
CVE-2023-27160 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27160)
SSRF in ssrf (CVE-2023-27160). Successful exploitation can lead to full system takeover.
CVE-2023-1060 Cross-Site Scripting (XSS) in ykmbilisim (CVE-2023-1060)
cross-site scripting in ykmbilisim (CVE-2023-1060). Risk of unauthorized operations or information disclosure.
CVE-2023-1725 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-1725)
SSRF in ssrf (CVE-2023-1725). Successful exploitation can lead to full system takeover.
CVE-2023-1013 Vulnerability in dizayn (CVE-2023-1013)
vulnerability in dizayn (CVE-2023-1013). Risk of unauthorized operations or information disclosure.
CVE-2023-27167 SQL Injection in sqli (CVE-2023-27167)
SQL injection in sqli (CVE-2023-27167). Confidential information can be exposed externally.
CVE-2023-25262 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-25262)
SSRF in ssrf (CVE-2023-25262). Confidential information can be exposed externally.
CVE-2023-25261 Code Injection in stimulsoft (CVE-2023-25261)
code injection in stimulsoft (CVE-2023-25261). Successful exploitation can lead to full system takeover.
CVE-2023-24094 Out-of-Bounds Write in dos (CVE-2023-24094)
out-of-bounds write in dos (CVE-2023-24094). Risk of unauthorized operations or information disclosure.
CVE-2023-28884 In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
CVE-2023-20081 Vulnerability in dos (CVE-2023-20081)
vulnerability in dos (CVE-2023-20081). Risk of unauthorized operations or information disclosure.
CVE-2023-1051 Cross-Site Scripting (XSS) in askoc (CVE-2023-1051)
cross-site scripting in askoc (CVE-2023-1051). Risk of unauthorized operations or information disclosure.
CVE-2023-1050 SQL Injection in sqli (CVE-2023-1050)
SQL injection in sqli (CVE-2023-1050). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →