Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 336/577
5.5
CVE-2023-30915

In email service, there is a missing permission check. This could lead to local information disclosure with no additiona

5.5
CVE-2023-30914

In email service, there is a missing permission check. This could lead to local information disclosure with no additiona

5.5
CVE-2023-30866

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2023-30865

In dialer service, there is a missing permission check. This could lead to local information disclosure with no addition

7.8
CVE-2023-30864

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege

7.8
CVE-2023-30863

In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege

5.5
CVE-2022-48448

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48447

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48446

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48445

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48444

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48443

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

5.5
CVE-2022-48442

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

5.5
CVE-2022-48441

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

5.5
CVE-2022-48440

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

4.4
CVE-2022-48439

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

4.4
CVE-2022-48438

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

7.8
CVE-2022-48392

In dialer service, there is a possible missing permission check. This could lead to local escalation of privilege with n

5.5
CVE-2022-48391

In telephony service, there is a possible missing permission check. This could lead to local denial of service with no a

7.8
CVE-2022-48390

In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege wit

3.5
CVE-2018-25087

A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start o

8.8
CVE-2023-2546

The WP User Switch plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.2.

3.5
CVE-2017-20185

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Fuzzy SWMP. It has been rated as problematic. This issue af

3.5
CVE-2015-10117

A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPre

4.3
CVE-2015-10116

A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPres

7.2
CVE-2023-32628

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an a

7.2
CVE-2023-32540

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an

7.2
CVE-2023-22450

In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an att

7.3
CVE-2023-34103

Avo is an open source ruby on rails admin panel creation framework. In affected versions some avo fields are vulnerable

8.3
CVE-2023-34102

Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to ope

8.8
CVE-2023-3079KEV

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corr

7.8
CVE-2023-3027

The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain so

7.5
CVE-2023-24510

On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.

6.7
CVE-2022-48188

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could al

6.7
CVE-2022-48181

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker

4.3
CVE-2013-10030

A vulnerability, which was classified as problematic, has been found in Exit Box Lite Plugin up to 1.06 on WordPress. Af

7.8
CVE-2023-3111

A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. T

7.8
CVE-2023-34097

hoppscotch is an open source API development ecosystem. In versions prior to 2023.4.5 the database password is exposed i

8.8
CVE-2023-33410

Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vu

6.5
CVE-2023-33409

Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/com

5.4
CVE-2023-33408

Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation

7.5
CVE-2023-31893

Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursi

9.8
CVE-2023-29631

PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php.

9.8
CVE-2023-29630

PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php.

9.8
CVE-2023-29629

PrestaShop jmsthemelayout 2.5.5 is vulnerable to SQL Injection via ajax_jmsvermegamenu.php.

7.8
CVE-2022-4569

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow

7.5
CVE-2020-19028

*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive informat

4.3
CVE-2013-10029

A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vu

5.4
CVE-2023-33970

Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a

6.4
CVE-2023-33969

Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scriptin

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.