Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-5634 |
|
SQL Injection in sqli (CVE-2023-5634)
SQL injection in sqli (CVE-2023-5634). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6118 |
|
Path Traversal in path-traversal (CVE-2023-6118)
path traversal in path-traversal (CVE-2023-6118). Confidential information can be exposed externally.
|
| CVE-2023-3631 |
|
SQL Injection in sqli (CVE-2023-3631)
SQL injection in sqli (CVE-2023-3631). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4406 |
|
Cross-Site Scripting (XSS) in kc-group-e-commerce-software-project (CVE-2023-4406)
cross-site scripting in kc-group-e-commerce-software-project (CVE-2023-4406). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-3377 |
|
SQL Injection in sqli (CVE-2023-3377)
SQL injection in sqli (CVE-2023-3377). Successful exploitation can lead to full system takeover.
|
| CVE-2023-47821 |
|
Cross-Site Scripting (XSS) in onlineoptimisation (CVE-2023-47821)
cross-site scripting in onlineoptimisation (CVE-2023-47821). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-48105 |
|
Out-of-Bounds Write in c (CVE-2023-48105)
out-of-bounds write in c (CVE-2023-48105). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-2889 |
|
SQL Injection in sqli (CVE-2023-2889)
SQL injection in sqli (CVE-2023-2889). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5047 |
|
SQL Injection in sqli (CVE-2023-5047)
SQL injection in sqli (CVE-2023-5047). Successful exploitation can lead to full system takeover.
|
| CVE-2023-6011 |
|
Cross-Site Scripting (XSS) in dece (CVE-2023-6011)
cross-site scripting in dece (CVE-2023-6011). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-47246 KEV |
|
[KEV] Path Traversal in Sysaid tomcat (CVE-2023-47246)
path traversal in Sysaid tomcat (CVE-2023-47246). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2023-41425 |
|
Cross-Site Scripting (XSS) in wondercms (CVE-2023-41425)
cross-site scripting in wondercms (CVE-2023-41425). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5678 |
|
Vulnerability in dos (CVE-2023-5678)
vulnerability in dos (CVE-2023-5678). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-5090 |
|
Vulnerability in c (CVE-2023-5090)
vulnerability in c (CVE-2023-5090). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46847 |
|
Vulnerability in dos (CVE-2023-46847)
vulnerability in dos (CVE-2023-46847). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20070 |
|
Vulnerability in dos (CVE-2023-20070)
vulnerability in dos (CVE-2023-20070). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20083 |
|
Vulnerability in dos (CVE-2023-20083)
vulnerability in dos (CVE-2023-20083). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20095 |
|
Vulnerability in dos (CVE-2023-20095)
vulnerability in dos (CVE-2023-20095). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20031 |
|
Vulnerability in dos (CVE-2023-20031)
vulnerability in dos (CVE-2023-20031). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20042 |
|
Vulnerability in dos (CVE-2023-20042)
vulnerability in dos (CVE-2023-20042). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20086 |
|
Vulnerability in dos (CVE-2023-20086)
vulnerability in dos (CVE-2023-20086). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20177 |
|
Vulnerability in dos (CVE-2023-20177)
vulnerability in dos (CVE-2023-20177). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20244 |
|
Vulnerability in dos (CVE-2023-20244)
vulnerability in dos (CVE-2023-20244). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-20270 |
|
Vulnerability in dos (CVE-2023-20270)
vulnerability in dos (CVE-2023-20270). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-36263 |
|
SQL Injection in sqli (CVE-2023-36263)
SQL injection in sqli (CVE-2023-36263). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5807 |
|
SQL Injection in sqli (CVE-2023-5807)
SQL injection in sqli (CVE-2023-5807). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5367 |
|
Out-of-Bounds Write in c (CVE-2023-5367)
out-of-bounds write in c (CVE-2023-5367). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5574 |
|
Use-After-Free in dos (CVE-2023-5574)
vulnerability in dos (CVE-2023-5574). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5758 |
|
Cross-Site Scripting (XSS) in mozilla (CVE-2023-5758)
cross-site scripting in mozilla (CVE-2023-5758). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-46136 |
|
Vulnerability in werkzeug (CVE-2023-46136)
vulnerability in werkzeug (CVE-2023-46136). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.3.8` or later.
|
| CVE-2023-45992 |
|
Cross-Site Scripting (XSS) in csrf (CVE-2023-45992)
cross-site scripting in csrf (CVE-2023-45992). Successful exploitation can lead to full system takeover.
|
| CVE-2023-45815 |
|
Cross-Site Scripting (XSS) in archivebox (CVE-2023-45815)
cross-site scripting in archivebox (CVE-2023-45815). Confidential information can be exposed externally. Mitigation: upgrade to `0.9.0` or later.
|
| CVE-2023-45379 |
|
SQL Injection in sqli (CVE-2023-45379)
SQL injection in sqli (CVE-2023-45379). Successful exploitation can lead to full system takeover.
|
| CVE-2022-37830 |
|
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
Interway a.s WebJET CMS 8.6.896 is vulnerable to Cross Site Scripting (XSS).
|
| CVE-2023-30148 |
|
Cross-Site Scripting (XSS) in store-opart (CVE-2023-30148)
cross-site scripting in store-opart (CVE-2023-30148). Confidential information can be exposed externally.
|
| CVE-2023-5045 |
|
SQL Injection in sqli (CVE-2023-5045)
SQL injection in sqli (CVE-2023-5045). Successful exploitation can lead to full system takeover.
|
| CVE-2023-5046 |
|
SQL Injection in sqli (CVE-2023-5046)
SQL injection in sqli (CVE-2023-5046). Successful exploitation can lead to full system takeover.
|
| CVE-2023-44487 KEV |
|
[KEV] Vulnerability in Ietf golang.org/x/net (CVE-2023-44487)
vulnerability in Ietf golang.org/x/net (CVE-2023-44487). Risk of unauthorized operations or information disclosure. Exploitable via ``Channel``. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2023-45199 |
|
Vulnerability in trustedfirmware (CVE-2023-45199)
vulnerability in trustedfirmware (CVE-2023-45199). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4530 |
|
SQL Injection in sqli (CVE-2023-4530)
SQL injection in sqli (CVE-2023-4530). Successful exploitation can lead to full system takeover.
|
| CVE-2023-3576 |
|
Buffer Overflow in dos (CVE-2023-3576)
vulnerability in dos (CVE-2023-3576). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-43176 |
|
Unsafe Deserialization in deserialization (CVE-2023-43176)
vulnerability in deserialization (CVE-2023-43176). Successful exploitation can lead to full system takeover.
|
| CVE-2023-41446 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41446)
cross-site scripting in phpkobo (CVE-2023-41446). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41447 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41447)
cross-site scripting in phpkobo (CVE-2023-41447). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41448 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41448)
cross-site scripting in phpkobo (CVE-2023-41448). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41451 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41451)
cross-site scripting in phpkobo (CVE-2023-41451). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41453 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41453)
cross-site scripting in phpkobo (CVE-2023-41453). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-41445 |
|
Cross-Site Scripting (XSS) in phpkobo (CVE-2023-41445)
cross-site scripting in phpkobo (CVE-2023-41445). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-4737 |
|
SQL Injection in sqli (CVE-2023-4737)
SQL injection in sqli (CVE-2023-4737). Successful exploitation can lead to full system takeover.
|
| CVE-2023-4934 |
|
Vulnerability in usta (CVE-2023-4934)
vulnerability in usta (CVE-2023-4934). Successful exploitation can lead to full system takeover.
|