Export limit exceeded: 387228 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (387228 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-30257 | 1 Fiio | 2 M6, M6 Firmware | 2025-01-29 | 7.8 High |
| A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root. | ||||
| CVE-2023-30237 | 1 Cyberghostvpn | 1 Cyberghost | 2025-01-29 | 7.8 High |
| CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe. | ||||
| CVE-2023-30203 | 1 Judging Management System Project | 1 Judging Management System | 2025-01-29 | 9.8 Critical |
| Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php. | ||||
| CVE-2023-30185 | 1 Crmeb | 1 Crmeb | 2025-01-29 | 9.8 Critical |
| CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php. | ||||
| CVE-2023-30184 | 1 Typecho | 1 Typecho | 2025-01-29 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in Typecho v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter at /index.php/archives/1/comment. | ||||
| CVE-2023-30097 | 1 Totaljs | 1 Messenger | 2025-01-29 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field. | ||||
| CVE-2023-30096 | 1 Totaljs | 1 Messenger | 2025-01-29 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field. | ||||
| CVE-2023-30095 | 1 Totaljs | 1 Messenger | 2025-01-29 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field. | ||||
| CVE-2023-30094 | 1 Totaljs | 1 Flow | 2025-01-29 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module. | ||||
| CVE-2023-30093 | 1 Onosproject | 1 Onos | 2025-01-29 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard. | ||||
| CVE-2023-30092 | 1 Online Pizza Ordering System Project | 1 Online Pizza Ordering System | 2025-01-29 | 9.8 Critical |
| SourceCodester Online Pizza Ordering System v1.0 is vulnerable to SQL Injection via the QTY parameter. | ||||
| CVE-2023-30088 | 1 Cesanta | 1 Mjs | 2025-01-29 | 5.5 Medium |
| An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c. | ||||
| CVE-2023-29963 | 1 S-cms | 1 S-cms | 2025-01-29 | 7.2 High |
| S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php. | ||||
| CVE-2023-29942 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType. | ||||
| CVE-2023-29941 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp. | ||||
| CVE-2023-29939 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr). | ||||
| CVE-2023-29935 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced. | ||||
| CVE-2023-29934 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect(). | ||||
| CVE-2023-29933 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument. | ||||
| CVE-2023-29932 | 1 Llvm | 1 Llvm | 2025-01-29 | 5.5 Medium |
| llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand. | ||||