Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-5806 |
|
SQL Injection in sqli (CVE-2023-5806)
SQL injection in sqli (CVE-2023-5806). Successful exploitation can lead to full system takeover.
|
| CVE-2024-21887 KEV |
|
[KEV] Command Injection in Ivanti connect-secure-and-policy-secure (CVE-2024-21887)
command injection in Ivanti connect-secure-and-policy-secure (CVE-2024-21887). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-26999 |
|
XXE (XML External Entity) in dos (CVE-2023-26999)
vulnerability in dos (CVE-2023-26999). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50643 |
|
Vulnerability in evernote (CVE-2023-50643)
vulnerability in evernote (CVE-2023-50643). Successful exploitation can lead to full system takeover.
|
| CVE-2023-47458 |
|
Vulnerability in bladex (CVE-2023-47458)
vulnerability in bladex (CVE-2023-47458). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6436 |
|
SQL Injection in sqli (CVE-2023-6436)
SQL injection in sqli (CVE-2023-6436). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50651 |
|
OS Command Injection in totolink (CVE-2023-50651)
OS command injection in totolink (CVE-2023-50651). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4675 |
|
SQL Injection in sqli (CVE-2023-4675)
SQL injection in sqli (CVE-2023-4675). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4541 |
|
SQL Injection in sqli (CVE-2023-4541)
SQL injection in sqli (CVE-2023-4541). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4671 |
|
SQL Injection in sqli (CVE-2023-4671)
SQL injection in sqli (CVE-2023-4671). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6879 |
|
Vulnerability in aomedia (CVE-2023-6879)
vulnerability in aomedia (CVE-2023-6879). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6190 |
|
Path Traversal in path-traversal (CVE-2023-6190)
path traversal in path-traversal (CVE-2023-6190). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6145 |
|
SQL Injection in sqli (CVE-2023-6145)
SQL injection in sqli (CVE-2023-6145). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50988 |
|
Out-of-Bounds Write in tenda (CVE-2023-50988)
out-of-bounds write in tenda (CVE-2023-50988). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50989 |
|
Command Injection in tenda (CVE-2023-50989)
command injection in tenda (CVE-2023-50989). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50990 |
|
Out-of-Bounds Write in tenda (CVE-2023-50990)
out-of-bounds write in tenda (CVE-2023-50990). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50992 |
|
Out-of-Bounds Write in tenda (CVE-2023-50992)
out-of-bounds write in tenda (CVE-2023-50992). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50983 |
|
Command Injection in tenda (CVE-2023-50983)
command injection in tenda (CVE-2023-50983). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50984 |
|
Out-of-Bounds Write in tenda (CVE-2023-50984)
out-of-bounds write in tenda (CVE-2023-50984). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50985 |
|
Out-of-Bounds Write in tenda (CVE-2023-50985)
out-of-bounds write in tenda (CVE-2023-50985). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50986 |
|
Out-of-Bounds Write in tenda (CVE-2023-50986)
out-of-bounds write in tenda (CVE-2023-50986). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50987 |
|
Out-of-Bounds Write in tenda (CVE-2023-50987)
out-of-bounds write in tenda (CVE-2023-50987). Successful exploitation can lead to full system takeover.
|
| CVE-2023-50918 |
|
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.
app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.
|
| CVE-2023-41265 KEV |
|
[KEV] Vulnerability in Qlik sense (CVE-2023-41265)
vulnerability in Qlik sense (CVE-2023-41265). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2023-5636 |
|
Unrestricted File Upload in arslansoft-education-portal-project (CVE-2023-5636)
vulnerability in arslansoft-education-portal-project (CVE-2023-5636). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5634 |
|
SQL Injection in sqli (CVE-2023-5634)
SQL injection in sqli (CVE-2023-5634). Successful exploitation can lead to full system takeover.
|
| CVE-2023-23325 |
|
OS Command Injection in zumtobel (CVE-2023-23325)
OS command injection in zumtobel (CVE-2023-23325). Successful exploitation can lead to full system takeover.
|
| CVE-2023-23324 |
|
Vulnerability in zumtobel (CVE-2023-23324)
vulnerability in zumtobel (CVE-2023-23324). Successful exploitation can lead to full system takeover.
|
| CVE-2023-48193 |
|
Vulnerability in fit2cloud (CVE-2023-48193)
vulnerability in fit2cloud (CVE-2023-48193). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3631 |
|
SQL Injection in sqli (CVE-2023-3631)
SQL injection in sqli (CVE-2023-3631). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3377 |
|
SQL Injection in sqli (CVE-2023-3377)
SQL injection in sqli (CVE-2023-3377). Successful exploitation can lead to full system takeover.
|
| CVE-2023-2889 |
|
SQL Injection in sqli (CVE-2023-2889)
SQL injection in sqli (CVE-2023-2889). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5047 |
|
SQL Injection in sqli (CVE-2023-5047)
SQL injection in sqli (CVE-2023-5047). Successful exploitation can lead to full system takeover.
|
| CVE-2023-49060 |
|
Vulnerability in mozilla (CVE-2023-49060)
vulnerability in mozilla (CVE-2023-49060). Successful exploitation can lead to full system takeover. Exploitable via ``referrerpolicy``.
|
| CVE-2023-48655 |
|
Vulnerability in misp-project (CVE-2023-48655)
vulnerability in misp-project (CVE-2023-48655). Successful exploitation can lead to full system takeover.
|
| CVE-2023-48656 |
|
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.
|
| CVE-2023-48657 |
|
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.
|
| CVE-2023-48658 |
|
Vulnerability in misp-project (CVE-2023-48658)
vulnerability in misp-project (CVE-2023-48658). Successful exploitation can lead to full system takeover.
|
| CVE-2023-48659 |
|
Vulnerability in misp-project (CVE-2023-48659)
vulnerability in misp-project (CVE-2023-48659). Successful exploitation can lead to full system takeover.
|
| CVE-2023-43902 |
|
Vulnerability in emudhra (CVE-2023-43902)
vulnerability in emudhra (CVE-2023-43902). Successful exploitation can lead to full system takeover.
|
| CVE-2023-47246 KEV |
|
[KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246)
path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-46850 |
|
Use-After-Free in openvpn (CVE-2023-46850)
vulnerability in openvpn (CVE-2023-46850). Successful exploitation can lead to full system takeover.
|
| CVE-2023-47359 |
|
Out-of-Bounds Write in videolan (CVE-2023-47359)
out-of-bounds write in videolan (CVE-2023-47359). Successful exploitation can lead to full system takeover.
|
| CVE-2023-46958 |
|
Code Injection in lmxcms (CVE-2023-46958)
code injection in lmxcms (CVE-2023-46958). Successful exploitation can lead to full system takeover.
|
| CVE-2023-42425 |
|
Vulnerability in turing (CVE-2023-42425)
vulnerability in turing (CVE-2023-42425). Successful exploitation can lead to full system takeover.
|
| CVE-2023-36263 |
|
SQL Injection in sqli (CVE-2023-36263)
SQL injection in sqli (CVE-2023-36263). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5807 |
|
SQL Injection in sqli (CVE-2023-5807)
SQL injection in sqli (CVE-2023-5807). Successful exploitation can lead to full system takeover.
|
| CVE-2023-46233 |
|
Vulnerability in crypto-js-project (CVE-2023-46233)
vulnerability in crypto-js-project (CVE-2023-46233). Confidential information can be exposed externally.
|
| CVE-2023-46010 |
|
Code Injection in seacms (CVE-2023-46010)
code injection in seacms (CVE-2023-46010). Successful exploitation can lead to full system takeover.
|
| CVE-2023-45992 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2023-45992)
cross-site scripting in csrf (CVE-2023-45992). Successful exploitation can lead to full system takeover.
|