Search vulnerabilities

Expected end of text, found 'ż' (at char 47), (line:1, col:48)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,829

CVE-2023-37748

ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Miniupnp Project
Products
Ngiflib
CVE-2023-37746

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter of the /admin/contactus.php component.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpgurukul
Products
Maid Hiring Management System
CVE-2023-37745

A cross-site scripting (XSS) vulnerability in Maid Hiring Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Description of the /admin/aboutus.php component.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpgurukul
Products
Maid Hiring Management System
CVE-2023-37743

A cross-site scripting (XSS) vulnerability in Teacher Subject Allocation System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search text box.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpgurukul
Products
Teacher Subject Allocation System
CVE-2023-37742

WebBoss.io CMS before v3.7.0.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Webboss
Products
Webboss.io Cms
CVE-2023-37739

i-doit Pro v25 and below was discovered to be vulnerable to path traversal.

CVSS 3.1 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
I-doit
Products
I-doit
CVE-2023-37733

An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Tduckcloud
Products
Tduck-platform
CVE-2023-37732

yasm: SEGV in yasm/libyasm/intnum.c in function yasm_intnum_copy()

Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Yasm Project
Products
Yasm
CVE-2023-37723

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromqossetting.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
4g300 4g300 Firmware F1202 and 7 more
CVE-2023-37722

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeUrlFilter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
4g300 4g300 Firmware F1202 and 3 more
CVE-2023-37721

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeMacFilter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
4g300 4g300 Firmware F1202 and 7 more
CVE-2023-37719

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromP2pListFilter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware Fh1202 and 5 more
CVE-2023-37718

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromSafeClientFilter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
4g300 4g300 Firmware F1202 and 3 more
CVE-2023-37717

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromDhcpListClient.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 11 more
CVE-2023-37716

Tenda F1202 V1.0BR_V1.2.0.20(408) and FH1202_V1.2.0.19_EN, AC10 V1.0, AC1206 V1.0, AC7 V1.0, AC5 V1.0, and AC9 V3.0 were discovered to contain a stack overflow in the page parameter in the function fromNatStaticSetting.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 11 more
CVE-2023-37715

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function frmL7ProtForm.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
F1202 F1202 Firmware Fh1202 and 1 more
CVE-2023-37714

Tenda F1202 V1.0BR_V1.2.0.20(408), FH1202_V1.2.0.19_EN were discovered to contain a stack overflow in the page parameter in the function fromRouteStatic.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Tenda
Products
Ac7 Ac7 Firmware F1202 and 5 more
CVE-2023-37711

Tenda AC1206 V15.03.06.23 and AC10 V15.03.06.47 were discovered to contain a stack overflow in the deviceId parameter in the saveParentControlInfo function.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Tenda
Products
Ac10 Ac10 Firmware Ac1206 and 1 more