Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-43856 |
|
Vulnerability in iteachyou (CVE-2023-43856)
vulnerability in iteachyou (CVE-2023-43856). Confidential information can be exposed externally.
|
| CVE-2023-43234 |
|
Code Injection in dedebiz (CVE-2023-43234)
code injection in dedebiz (CVE-2023-43234). Successful exploitation can lead to full system takeover.
|
| CVE-2023-43278 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278)
vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.
|
| CVE-2023-41993 KEV |
|
[KEV] Vulnerability in Apple java (CVE-2023-41993)
vulnerability in Apple java (CVE-2023-41993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.8.0, 8.0.411` or later.
|
| CVE-2023-34576 |
|
SQL Injection in sqli (CVE-2023-34576)
SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.
|
| CVE-2023-40932 |
|
Cross-Site Scripting (XSS) in nagios (CVE-2023-40932)
cross-site scripting in nagios (CVE-2023-40932). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-40931 |
|
SQL Injection in sqli (CVE-2023-40931)
SQL injection in sqli (CVE-2023-40931). Confidential information can be exposed externally.
|
| CVE-2023-42399 |
|
Cross-Site Scripting (XSS) in csharp (CVE-2023-42399)
cross-site scripting in csharp (CVE-2023-42399). Risk of unauthorized operations or information disclosure.
|
| CVE-2021-45811 |
|
SQL Injection in sqli (CVE-2021-45811)
SQL injection in sqli (CVE-2021-45811). Confidential information can be exposed externally.
|
| CVE-2023-41098 |
|
Cross-Site Scripting (XSS) in misp-project (CVE-2023-41098)
cross-site scripting in misp-project (CVE-2023-41098). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-48174 |
|
Out-of-Bounds Write in c (CVE-2022-48174)
out-of-bounds write in c (CVE-2022-48174). Successful exploitation can lead to full system takeover.
|
| CVE-2020-19909 |
|
Vulnerability in c (CVE-2020-19909)
vulnerability in c (CVE-2020-19909). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19189 |
|
Out-of-Bounds Write in c (CVE-2020-19189)
out-of-bounds write in c (CVE-2020-19189). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19190 |
|
Out-of-Bounds Write in c (CVE-2020-19190)
out-of-bounds write in c (CVE-2020-19190). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19188 |
|
Out-of-Bounds Write in c (CVE-2020-19188)
out-of-bounds write in c (CVE-2020-19188). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19187 |
|
Out-of-Bounds Write in c (CVE-2020-19187)
out-of-bounds write in c (CVE-2020-19187). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19186 |
|
Out-of-Bounds Write in c (CVE-2020-19186)
out-of-bounds write in c (CVE-2020-19186). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-19185 |
|
Out-of-Bounds Write in c (CVE-2020-19185)
out-of-bounds write in c (CVE-2020-19185). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-39807 |
|
SQL Injection in sqli (CVE-2023-39807)
SQL injection in sqli (CVE-2023-39807). Successful exploitation can lead to full system takeover.
|
| CVE-2023-39809 |
|
Command Injection in nvki (CVE-2023-39809)
command injection in nvki (CVE-2023-39809). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38838 |
|
SQL Injection in sqli (CVE-2023-38838)
SQL injection in sqli (CVE-2023-38838). Confidential information can be exposed externally.
|
| CVE-2023-30186 |
|
Use-After-Free in onlyoffice (CVE-2023-30186)
vulnerability in onlyoffice (CVE-2023-30186). Successful exploitation can lead to full system takeover.
|
| CVE-2023-30187 |
|
Out-of-Bounds Write in onlyoffice (CVE-2023-30187)
out-of-bounds write in onlyoffice (CVE-2023-30187). Successful exploitation can lead to full system takeover.
|
| CVE-2023-30188 |
|
Vulnerability in dos (CVE-2023-30188)
vulnerability in dos (CVE-2023-30188). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-39805 |
|
SQL Injection in sqli (CVE-2023-39805)
SQL injection in sqli (CVE-2023-39805). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38180 KEV |
|
[KEV] Vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180)
vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-26961 |
|
Cross-Site Scripting (XSS) in alteryx (CVE-2023-26961)
cross-site scripting in alteryx (CVE-2023-26961). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /gallery/api/media`.
|
| CVE-2023-36873 |
|
.NET Framework Spoofing Vulnerability
.NET Framework Spoofing Vulnerability
|
| CVE-2023-36899 |
|
ASP.NET Elevation of Privilege Vulnerability
ASP.NET Elevation of Privilege Vulnerability
|
| CVE-2023-35391 |
|
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
|
| CVE-2023-38178 |
|
.NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
|
| CVE-2023-35390 |
|
.NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
|
| CVE-2023-36095 |
|
Code Injection in langchain (CVE-2023-36095)
code injection in langchain (CVE-2023-36095). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.236` or later.
|
| CVE-2023-34552 |
|
Out-of-Bounds Write in c (CVE-2023-34552)
out-of-bounds write in c (CVE-2023-34552). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34551 |
|
Out-of-Bounds Write in c (CVE-2023-34551)
out-of-bounds write in c (CVE-2023-34551). Successful exploitation can lead to full system takeover.
|
| CVE-2023-38559 |
|
Out-of-Bounds Read in c (CVE-2023-38559)
vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-34842 |
|
Code Injection in dedecms (CVE-2023-34842)
code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.
|
| CVE-2023-37647 |
|
SQL Injection in sqli (CVE-2023-37647)
SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3640 |
|
Vulnerability in c (CVE-2023-3640)
vulnerability in c (CVE-2023-3640). Successful exploitation can lead to full system takeover.
|
| CVE-2023-22039 |
|
Vulnerability in c (CVE-2023-22039)
vulnerability in c (CVE-2023-22039). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3617 |
|
SQL Injection in sqli (CVE-2023-3617)
SQL injection in sqli (CVE-2023-3617). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3390 |
|
Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34673 |
|
Vulnerability in c (CVE-2023-34673)
vulnerability in c (CVE-2023-34673). Confidential information can be exposed externally.
|
| CVE-2023-31868 |
|
Cross-Site Scripting (XSS) in sage (CVE-2023-31868)
cross-site scripting in sage (CVE-2023-31868). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-35823 |
|
Vulnerability in c (CVE-2023-35823)
vulnerability in c (CVE-2023-35823). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3268 |
|
Out-of-Bounds Read in c (CVE-2023-3268)
vulnerability in c (CVE-2023-3268). Confidential information can be exposed externally.
|
| CVE-2023-34752 |
|
SQL Injection in sqli (CVE-2023-34752)
SQL injection in sqli (CVE-2023-34752). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34944 |
|
Unrestricted File Upload in chamilo (CVE-2023-34944)
vulnerability in chamilo (CVE-2023-34944). Successful exploitation can lead to full system takeover.
|
| CVE-2023-29549 |
|
Vulnerability in mozilla (CVE-2023-29549)
vulnerability in mozilla (CVE-2023-29549). Data can be tampered with by attackers.
|
| CVE-2022-47879 |
|
Code Injection in jedox (CVE-2022-47879)
code injection in jedox (CVE-2022-47879). Successful exploitation can lead to full system takeover.
|