Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-31799 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31799)
cross-site scripting in chamilo (CVE-2023-31799). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-31800 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31800)
cross-site scripting in chamilo (CVE-2023-31800). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-31801 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31801)
cross-site scripting in chamilo (CVE-2023-31801). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-31802 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31802)
cross-site scripting in chamilo (CVE-2023-31802). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-31803 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31803)
cross-site scripting in chamilo (CVE-2023-31803). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-31804 |
|
Cross-Site Scripting (XSS) in chamilo (CVE-2023-31804)
cross-site scripting in chamilo (CVE-2023-31804). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-30086 |
|
Out-of-Bounds Write in c (CVE-2023-30086)
out-of-bounds write in c (CVE-2023-30086). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-30243 |
|
SQL Injection in sqli (CVE-2023-30243)
SQL injection in sqli (CVE-2023-30243). Confidential information can be exposed externally.
|
| CVE-2023-30242 |
|
SQL Injection in sqli (CVE-2023-30242)
SQL injection in sqli (CVE-2023-30242). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2235 |
|
Use-After-Free in privilege-escalation (CVE-2023-2235)
vulnerability in privilege-escalation (CVE-2023-2235). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27973 |
|
Out-of-Bounds Write in hp (CVE-2023-27973)
out-of-bounds write in hp (CVE-2023-27973). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27972 |
|
Vulnerability in hp (CVE-2023-27972)
vulnerability in hp (CVE-2023-27972). Successful exploitation can lead to full system takeover.
|
| CVE-2023-25292 |
|
Cross-Site Scripting (XSS) in group-office (CVE-2023-25292)
cross-site scripting in group-office (CVE-2023-25292). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-27979 |
|
Cross-Site Scripting (XSS) in tooljet (CVE-2022-27979)
cross-site scripting in tooljet (CVE-2022-27979). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-30404 |
|
Code Injection in aigital (CVE-2023-30404)
code injection in aigital (CVE-2023-30404). Successful exploitation can lead to full system takeover.
|
| CVE-2023-30798 |
|
Vulnerability in starlette (CVE-2023-30798)
vulnerability in starlette (CVE-2023-30798). Risk of unauthorized operations or information disclosure. Exploitable via ``MultipartParser``. Mitigation: upgrade to `0.25.0` or later.
|
| CVE-2023-2206 |
|
SQL Injection in sqli (CVE-2023-2206)
SQL injection in sqli (CVE-2023-2206). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2207 |
|
SQL Injection in sqli (CVE-2023-2207)
SQL injection in sqli (CVE-2023-2207). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2208 |
|
SQL Injection in sqli (CVE-2023-2208)
SQL injection in sqli (CVE-2023-2208). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2204 |
|
SQL Injection in sqli (CVE-2023-2204)
SQL injection in sqli (CVE-2023-2204). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2205 |
|
SQL Injection in sqli (CVE-2023-2205)
SQL injection in sqli (CVE-2023-2205). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1873 |
|
SQL Injection in sqli (CVE-2023-1873)
SQL injection in sqli (CVE-2023-1873). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1723 |
|
SQL Injection in sqli (CVE-2023-1723)
SQL injection in sqli (CVE-2023-1723). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1833 |
|
Vulnerability in redline (CVE-2023-1833)
vulnerability in redline (CVE-2023-1833). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1803 |
|
Vulnerability in redline (CVE-2023-1803)
vulnerability in redline (CVE-2023-1803). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27666 |
|
Cross-Site Scripting (XSS) in auto-dealer-management-system-project (CVE-2023-27666)
cross-site scripting in auto-dealer-management-system-project (CVE-2023-27666). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1863 |
|
SQL Injection in sqli (CVE-2023-1863)
SQL injection in sqli (CVE-2023-1863). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27667 |
|
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.
|
| CVE-2023-27779 |
|
SQL Injection in sqli (CVE-2023-27779)
SQL injection in sqli (CVE-2023-27779). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1829 |
|
Use-After-Free in privilege-escalation (CVE-2023-1829)
vulnerability in privilege-escalation (CVE-2023-1829). Successful exploitation can lead to full system takeover.
|
| CVE-2023-24721 |
|
Cross-Site Scripting (XSS) in liveaction (CVE-2023-24721)
cross-site scripting in liveaction (CVE-2023-24721). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1726 |
|
Cross-Site Scripting (XSS) in prolizyazilim (CVE-2023-1726)
cross-site scripting in prolizyazilim (CVE-2023-1726). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-22985 |
|
Cross-Site Scripting (XSS) in simple-guestbook-management-system-project (CVE-2023-22985)
cross-site scripting in simple-guestbook-management-system-project (CVE-2023-22985). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1765 |
|
SQL Injection in sqli (CVE-2023-1765)
SQL injection in sqli (CVE-2023-1765). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1766 |
|
Cross-Site Scripting (XSS) in akbim (CVE-2023-1766)
cross-site scripting in akbim (CVE-2023-1766). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-27162 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27162)
SSRF in ssrf (CVE-2023-27162). Confidential information can be exposed externally.
|
| CVE-2023-27163 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27163)
SSRF in ssrf (CVE-2023-27163). Confidential information can be exposed externally.
|
| CVE-2023-27159 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27159)
SSRF in ssrf (CVE-2023-27159). Confidential information can be exposed externally.
|
| CVE-2023-27160 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27160)
SSRF in ssrf (CVE-2023-27160). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1060 |
|
Cross-Site Scripting (XSS) in ykmbilisim (CVE-2023-1060)
cross-site scripting in ykmbilisim (CVE-2023-1060). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1725 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-1725)
SSRF in ssrf (CVE-2023-1725). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1013 |
|
Vulnerability in dizayn (CVE-2023-1013)
vulnerability in dizayn (CVE-2023-1013). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-27167 |
|
SQL Injection in sqli (CVE-2023-27167)
SQL injection in sqli (CVE-2023-27167). Confidential information can be exposed externally.
|
| CVE-2023-25262 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-25262)
SSRF in ssrf (CVE-2023-25262). Confidential information can be exposed externally.
|
| CVE-2023-25261 |
|
Code Injection in stimulsoft (CVE-2023-25261)
code injection in stimulsoft (CVE-2023-25261). Successful exploitation can lead to full system takeover.
|
| CVE-2023-24094 |
|
Out-of-Bounds Write in dos (CVE-2023-24094)
out-of-bounds write in dos (CVE-2023-24094). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-28884 |
|
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.
|
| CVE-2023-20081 |
|
Vulnerability in dos (CVE-2023-20081)
vulnerability in dos (CVE-2023-20081). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1051 |
|
Cross-Site Scripting (XSS) in askoc (CVE-2023-1051)
cross-site scripting in askoc (CVE-2023-1051). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-1050 |
|
SQL Injection in sqli (CVE-2023-1050)
SQL injection in sqli (CVE-2023-1050). Successful exploitation can lead to full system takeover.
|