Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CVE-2023-37687 SQL Injection in phpgurukul (CVE-2023-37687)
SQL injection in phpgurukul (CVE-2023-37687). Successful exploitation can lead to full system takeover.
CVE-2017-18368 KEV [KEV] OS Command Injection in Zyxel p660hn-t1a-routers (CVE-2017-18368)
OS command injection in Zyxel p660hn-t1a-routers (CVE-2017-18368). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-38952 Vulnerability in zkteco (CVE-2023-38952)
vulnerability in zkteco (CVE-2023-38952). Confidential information can be exposed externally.
CVE-2023-38949 Vulnerability in zkteco (CVE-2023-38949)
vulnerability in zkteco (CVE-2023-38949). Data can be tampered with by attackers.
CVE-2023-36255 Code Injection in eramba (CVE-2023-36255)
code injection in eramba (CVE-2023-36255). Successful exploitation can lead to full system takeover.
CVE-2023-38955 Vulnerability in zkteco (CVE-2023-38955)
vulnerability in zkteco (CVE-2023-38955). Confidential information can be exposed externally.
CVE-2023-38956 Path Traversal in path-traversal (CVE-2023-38956)
path traversal in path-traversal (CVE-2023-38956). Confidential information can be exposed externally.
CVE-2023-34552 Out-of-Bounds Write in c (CVE-2023-34552)
out-of-bounds write in c (CVE-2023-34552). Successful exploitation can lead to full system takeover.
CVE-2023-34551 Out-of-Bounds Write in c (CVE-2023-34551)
out-of-bounds write in c (CVE-2023-34551). Successful exploitation can lead to full system takeover.
CVE-2023-35081 KEV [KEV] Path Traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081)
path traversal in Ivanti endpoint-manager-mobile-epmm (CVE-2023-35081). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-22623 Path Traversal in path-traversal (CVE-2020-22623)
path traversal in path-traversal (CVE-2020-22623). Confidential information can be exposed externally.
CVE-2023-37580 KEV [KEV] Cross-Site Scripting (XSS) in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580)
cross-site scripting in Synacor zimbra-collaboration-suite-zcs (CVE-2023-37580). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-26911 Vulnerability in asus (CVE-2023-26911)
vulnerability in asus (CVE-2023-26911). Successful exploitation can lead to full system takeover.
CVE-2023-38606 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2023-38606)
vulnerability in Apple multiple-products (CVE-2023-38606). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-35067 Vulnerability in infodrom (CVE-2023-35067)
vulnerability in infodrom (CVE-2023-35067). Confidential information can be exposed externally.
CVE-2023-3640 Vulnerability in c (CVE-2023-3640)
vulnerability in c (CVE-2023-3640). Successful exploitation can lead to full system takeover.
CVE-2023-3609 Use-After-Free in privilege-escalation (CVE-2023-3609)
vulnerability in privilege-escalation (CVE-2023-3609). Successful exploitation can lead to full system takeover.
CVE-2021-35391 SSRF (Server-Side Request Forgery) in deskpro (CVE-2021-35391)
SSRF in deskpro (CVE-2021-35391). Successful exploitation can lead to full system takeover.
CVE-2023-29298 KEV [KEV] Vulnerability in Adobe coldfusion (CVE-2023-29298)
vulnerability in Adobe coldfusion (CVE-2023-29298). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-38205 KEV [KEV] Vulnerability in Adobe coldfusion (CVE-2023-38205)
vulnerability in Adobe coldfusion (CVE-2023-38205). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-30383 Vulnerability in dos (CVE-2023-30383)
vulnerability in dos (CVE-2023-30383). Risk of unauthorized operations or information disclosure.
CVE-2023-2959 Authentication Bypass in olivaekspertiz (CVE-2023-2959)
authentication bypass in olivaekspertiz (CVE-2023-2959). Confidential information can be exposed externally.
CVE-2023-36884 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-36884)
vulnerability in Microsoft windows (CVE-2023-36884). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-31821 Vulnerability in albis (CVE-2023-31821)
vulnerability in albis (CVE-2023-31821). Confidential information can be exposed externally.
CVE-2023-31823 Vulnerability in marui (CVE-2023-31823)
vulnerability in marui (CVE-2023-31823). Confidential information can be exposed externally.
CVE-2023-31824 Vulnerability in dericia (CVE-2023-31824)
vulnerability in dericia (CVE-2023-31824). Confidential information can be exposed externally.
CVE-2023-31819 Vulnerability in keisei-store (CVE-2023-31819)
vulnerability in keisei-store (CVE-2023-31819). Confidential information can be exposed externally.
CVE-2023-31820 Vulnerability in shizutetsu (CVE-2023-31820)
vulnerability in shizutetsu (CVE-2023-31820). Confidential information can be exposed externally.
CVE-2023-31822 Vulnerability in entetsu (CVE-2023-31822)
vulnerability in entetsu (CVE-2023-31822). Confidential information can be exposed externally.
CVE-2023-31825 Vulnerability in inageya (CVE-2023-31825)
vulnerability in inageya (CVE-2023-31825). Confidential information can be exposed externally.
CVE-2023-35069 Path Traversal in path-traversal (CVE-2023-35069)
path traversal in path-traversal (CVE-2023-35069). Confidential information can be exposed externally.
CVE-2022-29303 KEV [KEV] OS Command Injection in Solarview compact (CVE-2022-29303)
OS command injection in Solarview compact (CVE-2022-29303). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-37450 KEV [KEV] Vulnerability in Apple multiple-products (CVE-2023-37450)
vulnerability in Apple multiple-products (CVE-2023-37450). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2020-20021 Vulnerability in dos (CVE-2020-20021)
vulnerability in dos (CVE-2020-20021). Risk of unauthorized operations or information disclosure.
CVE-2023-33161 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability
Microsoft Office Elevation of Privilege Vulnerability
CVE-2023-33149 Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability
Microsoft ActiveX Remote Code Execution Vulnerability
CVE-2023-33158 Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-31818 Vulnerability in marukyu (CVE-2023-31818)
vulnerability in marukyu (CVE-2023-31818). Confidential information can be exposed externally.
CVE-2023-3617 SQL Injection in sqli (CVE-2023-3617)
SQL injection in sqli (CVE-2023-3617). Risk of unauthorized operations or information disclosure.
CVE-2023-32046 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-32046)
vulnerability in Microsoft windows (CVE-2023-32046). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-32049 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-32049)
vulnerability in Microsoft windows (CVE-2023-32049). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-35311 KEV [KEV] Vulnerability in Microsoft outlook (CVE-2023-35311)
vulnerability in Microsoft outlook (CVE-2023-35311). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-36874 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-36874)
vulnerability in Microsoft windows (CVE-2023-36874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2022-31199 KEV [KEV] Unsafe Deserialization in Netwrix auditor (CVE-2022-31199)
vulnerability in Netwrix auditor (CVE-2022-31199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2023-3271 Vulnerability in sick (CVE-2023-3271)
vulnerability in sick (CVE-2023-3271). Confidential information can be exposed externally.
CVE-2023-3272 Vulnerability in sick (CVE-2023-3272)
vulnerability in sick (CVE-2023-3272). Confidential information can be exposed externally.
CVE-2023-3273 Vulnerability in sick (CVE-2023-3273)
vulnerability in sick (CVE-2023-3273). Risk of unauthorized operations or information disclosure.
CVE-2023-35696 Vulnerability in sick (CVE-2023-35696)
vulnerability in sick (CVE-2023-35696). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →