Search vulnerabilities

Expected end of text, found 'ż' (at char 47), (line:1, col:48)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,857

CVE-2023-39096

WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Webboss
Products
Webboss.io Cms
CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Zerowdd
Products
Studentmanager
CVE-2023-39076

Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of Service (DoS) in the in-car infotainment system.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Gm
Products
Chevrolet Equinox Mylink Infotainment System
CVE-2023-39075

Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Renault
Products
Zoe Ev 2021 Zoe Ev 2021 Firmware
CVE-2023-39073

An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Voltronicpower
Products
Snmp Web Pro
CVE-2023-39070

An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Cppchecksolutions
Products
Cppcheck
CVE-2023-39069

An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Strangebee
Products
Cortex Thehive
CVE-2023-39068

Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of service via a crafted request to the service.XM component.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Nbd80n32ra-kl-v3 Nbd80s09s-klc Xiongmaitech
Products
Nbd80n32ra-kl-v3 Nbd80s09s-klc Nb080s09s-klc and 3 more
CVE-2023-39067

Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Zlmediakit
Products
Zlmediakit
CVE-2023-39063

Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Raidenftpd
Products
Raidenftpd
CVE-2023-39062

Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Html2pdf Project
Products
Html2pdf
CVE-2023-39061

Cross Site Request Forgery (CSRF) vulnerability in Chamilo v.1.11 thru v.1.11.20 allows a remote authenticated privileged attacker to execute arbitrary code.

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Chamilo
Products
Chamilo
CVE-2023-39059

An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Ansible-semaphore
Products
Ansible Semaphore
CVE-2023-39057

An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Lycorp
Products
Line Mini App
CVE-2023-39054

An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Lycorp
Products
Line Mini App
CVE-2023-39053

An information leak in Hattoriya v13.6.1 allows attackers to obtain the channel access token and send crafted messages.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Lycorp
Products
Line Mini App