Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Group: languages Clear
ID Title
CVE-2023-43856 Vulnerability in iteachyou (CVE-2023-43856)
vulnerability in iteachyou (CVE-2023-43856). Confidential information can be exposed externally.
CVE-2023-43234 Code Injection in dedebiz (CVE-2023-43234)
code injection in dedebiz (CVE-2023-43234). Successful exploitation can lead to full system takeover.
CVE-2023-43278 Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-43278)
vulnerability in csrf (CVE-2023-43278). Successful exploitation can lead to full system takeover.
CVE-2023-41993 KEV [KEV] Vulnerability in Apple java (CVE-2023-41993)
vulnerability in Apple java (CVE-2023-41993). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `1.8.0, 8.0.411` or later.
CVE-2023-34576 SQL Injection in sqli (CVE-2023-34576)
SQL injection in sqli (CVE-2023-34576). Successful exploitation can lead to full system takeover.
CVE-2023-40932 Cross-Site Scripting (XSS) in nagios (CVE-2023-40932)
cross-site scripting in nagios (CVE-2023-40932). Risk of unauthorized operations or information disclosure.
CVE-2023-40931 SQL Injection in sqli (CVE-2023-40931)
SQL injection in sqli (CVE-2023-40931). Confidential information can be exposed externally.
CVE-2023-42399 Cross-Site Scripting (XSS) in csharp (CVE-2023-42399)
cross-site scripting in csharp (CVE-2023-42399). Risk of unauthorized operations or information disclosure.
CVE-2021-45811 SQL Injection in sqli (CVE-2021-45811)
SQL injection in sqli (CVE-2021-45811). Confidential information can be exposed externally.
CVE-2023-41098 Cross-Site Scripting (XSS) in misp-project (CVE-2023-41098)
cross-site scripting in misp-project (CVE-2023-41098). Risk of unauthorized operations or information disclosure.
CVE-2022-48174 Out-of-Bounds Write in c (CVE-2022-48174)
out-of-bounds write in c (CVE-2022-48174). Successful exploitation can lead to full system takeover.
CVE-2020-19909 Vulnerability in c (CVE-2020-19909)
vulnerability in c (CVE-2020-19909). Risk of unauthorized operations or information disclosure.
CVE-2020-19189 Out-of-Bounds Write in c (CVE-2020-19189)
out-of-bounds write in c (CVE-2020-19189). Risk of unauthorized operations or information disclosure.
CVE-2020-19190 Out-of-Bounds Write in c (CVE-2020-19190)
out-of-bounds write in c (CVE-2020-19190). Risk of unauthorized operations or information disclosure.
CVE-2020-19188 Out-of-Bounds Write in c (CVE-2020-19188)
out-of-bounds write in c (CVE-2020-19188). Risk of unauthorized operations or information disclosure.
CVE-2020-19187 Out-of-Bounds Write in c (CVE-2020-19187)
out-of-bounds write in c (CVE-2020-19187). Risk of unauthorized operations or information disclosure.
CVE-2020-19186 Out-of-Bounds Write in c (CVE-2020-19186)
out-of-bounds write in c (CVE-2020-19186). Risk of unauthorized operations or information disclosure.
CVE-2020-19185 Out-of-Bounds Write in c (CVE-2020-19185)
out-of-bounds write in c (CVE-2020-19185). Risk of unauthorized operations or information disclosure.
CVE-2023-39807 SQL Injection in sqli (CVE-2023-39807)
SQL injection in sqli (CVE-2023-39807). Successful exploitation can lead to full system takeover.
CVE-2023-39809 Command Injection in nvki (CVE-2023-39809)
command injection in nvki (CVE-2023-39809). Successful exploitation can lead to full system takeover.
CVE-2023-38838 SQL Injection in sqli (CVE-2023-38838)
SQL injection in sqli (CVE-2023-38838). Confidential information can be exposed externally.
CVE-2023-30186 Use-After-Free in onlyoffice (CVE-2023-30186)
vulnerability in onlyoffice (CVE-2023-30186). Successful exploitation can lead to full system takeover.
CVE-2023-30187 Out-of-Bounds Write in onlyoffice (CVE-2023-30187)
out-of-bounds write in onlyoffice (CVE-2023-30187). Successful exploitation can lead to full system takeover.
CVE-2023-30188 Vulnerability in dos (CVE-2023-30188)
vulnerability in dos (CVE-2023-30188). Risk of unauthorized operations or information disclosure.
CVE-2023-39805 SQL Injection in sqli (CVE-2023-39805)
SQL injection in sqli (CVE-2023-39805). Successful exploitation can lead to full system takeover.
CVE-2023-38180 KEV [KEV] Vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180)
vulnerability in Microsoft net-core-and-visual-studio (CVE-2023-38180). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-26961 Cross-Site Scripting (XSS) in alteryx (CVE-2023-26961)
cross-site scripting in alteryx (CVE-2023-26961). Risk of unauthorized operations or information disclosure. Exploitable via `PUT /gallery/api/media`.
CVE-2023-36873 .NET Framework Spoofing Vulnerability
.NET Framework Spoofing Vulnerability
CVE-2023-36899 ASP.NET Elevation of Privilege Vulnerability
ASP.NET Elevation of Privilege Vulnerability
CVE-2023-35391 ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-38178 .NET Core and Visual Studio Denial of Service Vulnerability
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-35390 .NET and Visual Studio Remote Code Execution Vulnerability
.NET and Visual Studio Remote Code Execution Vulnerability
CVE-2023-36095 Code Injection in langchain (CVE-2023-36095)
code injection in langchain (CVE-2023-36095). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.0.236` or later.
CVE-2023-34552 Out-of-Bounds Write in c (CVE-2023-34552)
out-of-bounds write in c (CVE-2023-34552). Successful exploitation can lead to full system takeover.
CVE-2023-34551 Out-of-Bounds Write in c (CVE-2023-34551)
out-of-bounds write in c (CVE-2023-34551). Successful exploitation can lead to full system takeover.
CVE-2023-38559 Out-of-Bounds Read in c (CVE-2023-38559)
vulnerability in c (CVE-2023-38559). Risk of unauthorized operations or information disclosure.
CVE-2023-34842 Code Injection in dedecms (CVE-2023-34842)
code injection in dedecms (CVE-2023-34842). Successful exploitation can lead to full system takeover.
CVE-2023-37647 SQL Injection in sqli (CVE-2023-37647)
SQL injection in sqli (CVE-2023-37647). Successful exploitation can lead to full system takeover.
CVE-2023-3640 Vulnerability in c (CVE-2023-3640)
vulnerability in c (CVE-2023-3640). Successful exploitation can lead to full system takeover.
CVE-2023-22039 Vulnerability in c (CVE-2023-22039)
vulnerability in c (CVE-2023-22039). Risk of unauthorized operations or information disclosure.
CVE-2023-3617 SQL Injection in sqli (CVE-2023-3617)
SQL injection in sqli (CVE-2023-3617). Risk of unauthorized operations or information disclosure.
CVE-2023-3390 Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
CVE-2023-34673 Vulnerability in c (CVE-2023-34673)
vulnerability in c (CVE-2023-34673). Confidential information can be exposed externally.
CVE-2023-31868 Cross-Site Scripting (XSS) in sage (CVE-2023-31868)
cross-site scripting in sage (CVE-2023-31868). Risk of unauthorized operations or information disclosure.
CVE-2023-35823 Vulnerability in c (CVE-2023-35823)
vulnerability in c (CVE-2023-35823). Successful exploitation can lead to full system takeover.
CVE-2023-3268 Out-of-Bounds Read in c (CVE-2023-3268)
vulnerability in c (CVE-2023-3268). Confidential information can be exposed externally.
CVE-2023-34752 SQL Injection in sqli (CVE-2023-34752)
SQL injection in sqli (CVE-2023-34752). Successful exploitation can lead to full system takeover.
CVE-2023-34944 Unrestricted File Upload in chamilo (CVE-2023-34944)
vulnerability in chamilo (CVE-2023-34944). Successful exploitation can lead to full system takeover.
CVE-2023-29549 Vulnerability in mozilla (CVE-2023-29549)
vulnerability in mozilla (CVE-2023-29549). Data can be tampered with by attackers.
CVE-2022-47879 Code Injection in jedox (CVE-2022-47879)
code injection in jedox (CVE-2022-47879). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →