Export limit exceeded: 381670 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (381670 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-38862 1 Comfast 2 Cf-xr11, Cf-xr11 Firmware 2024-11-21 9.8 Critical
An issue in COMFAST CF-XR11 v.2.7.2 allows an attacker to execute arbitrary code via the destination parameter of sub_431F64 function in bin/webmgnt.
CVE-2023-38861 1 Wavlink 3 Wl-wn575a3, Wl-wn575a3 Firmware, Wl Wnj575a3 2024-11-21 9.8 Critical
An issue in Wavlink WL_WNJ575A3 v.R75A3_V1410_220513 allows a remote attacker to execute arbitrary code via username parameter of the set_sys_adm function in adm.cgi.
CVE-2023-38860 1 Langchain 1 Langchain 2024-11-21 9.8 Critical
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
CVE-2023-38858 1 Faad2 Project 1 Faad2 2024-11-21 6.5 Medium
Buffer Overflow vulnerability infaad2 v.2.10.1 allows a remote attacker to execute arbitrary code and cause a denial of service via the mp4info function in mp4read.c:1039.
CVE-2023-38856 1 Libxls Project 1 Libxls 2024-11-21 6.5 Medium
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:411.
CVE-2023-38855 1 Libxls Project 1 Libxls 2024-11-21 6.5 Medium
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the get_string function in xlstool.c:395.
CVE-2023-38854 1 Libxls Project 1 Libxls 2024-11-21 6.5 Medium
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the transcode_latin1_to_utf8 function in xlstool.c:296.
CVE-2023-38853 1 Libxls Project 1 Libxls 2024-11-21 6.5 Medium
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1015.
CVE-2023-38851 1 Libxls Project 1 Libxls 2024-11-21 6.5 Medium
Buffer Overflow vulnerability in libxlsv.1.6.2 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted XLS file to the xls_parseWorkBook function in xls.c:1018.
CVE-2023-38850 1 Msweet 1 Codedoc 2024-11-21 5.5 Medium
Buffer Overflow vulnerability in Michaelrsweet codedoc v.3.7 allows an attacker to cause a denial of service via the codedoc.c:1742 comppnent.
CVE-2023-38849 1 Linecorp 1 Line 2024-11-21 7.5 High
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38848 1 Linecorp 1 Line 2024-11-21 7.5 High
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38847 1 Linecorp 1 Line 2024-11-21 7.5 High
An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38846 1 Linecorp 1 Line 2024-11-21 7.5 High
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38845 1 Linecorp 1 Line 2024-11-21 7.5 High
An issue in Anglaise Company Anglaise.Company v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38843 1 Atlos 1 Atlos 2024-11-21 8.0 High
An issue in Atlos v.1.0 allows an authenticated attacker to execute arbitrary code via a crafted payload into the description field in the incident function.
CVE-2023-38840 1 Bitwarden 1 Bitwarden 2024-11-21 5.5 Medium
Bitwarden Desktop 2023.7.0 and below allows an attacker with local access to obtain sensitive information via the Bitwarden.exe process.
CVE-2023-38839 1 Kidus 1 Minimati 2024-11-21 7.5 High
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via theID parameter in the fulldelete.php component.
CVE-2023-38838 1 Kiduswb 1 Minimati 2024-11-21 7.5 High
SQL injection vulnerability in Kidus Minimati v.1.0.0 allows a remote attacker to obtain sensitive information via the edit.php component.
CVE-2023-38836 1 Boidcms 1 Boidcms 2024-11-21 8.8 High
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.