Total
47484 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-46583 | 1 Phpgurukul | 1 Nipah Virus Testing Management System | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross-Site Scripting (XSS) vulnerability in PHPGurukul Nipah virus (NiV) " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field. | |||||
| CVE-2023-46580 | 1 Code-projects | 1 Inventory Management | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component. | |||||
| CVE-2023-46505 | 1 Pwncyn | 1 Fancms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in FanCMS v.1.0.0 allows an attacker to execute arbitrary code via the content1 parameter in the demo.php file. | |||||
| CVE-2023-46504 | 1 Pwncyn | 1 Yxbookcms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a physically proximate attacker to execute arbitrary code via the library name function in the general settings component. | |||||
| CVE-2023-46503 | 1 Pwncyn | 1 Yxbookcms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in PwnCYN YXBOOKCMS v.1.0.2 allows a remote attacker to execute arbitrary code via the reader management and book input modules. | |||||
| CVE-2023-46499 | 1 Evershop | 1 Evershop | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted scripts to the Admin Panel. | |||||
| CVE-2023-46495 | 1 Evershop | 1 Evershop | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.8 allows a remote attacker to obtain sensitive information via a crafted request to the sortBy parameter. | |||||
| CVE-2023-46494 | 1 Evershop | 1 Evershop | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in EverShop NPM versions before v.1.0.0-rc.5 allows a remote attacker to obtain sensitive information via a crafted request to the ProductGrid function in admin/productGrid/Grid.jsx. | |||||
| CVE-2023-46492 | 1 Mldb | 1 Machine Learning Database | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in MLDB.ai v.2017.04.17.0 allows a remote attacker to execute arbitrary code via a crafted payload to the public_html/doc/index.html. | |||||
| CVE-2023-46491 | 1 Zentao | 1 Biz | 2026-06-17 | N/A | 6.1 MEDIUM |
| ZenTao Biz version 4.1.3 and before has a Cross Site Scripting (XSS) vulnerability in the Version Library. | |||||
| CVE-2023-46483 | 1 Timeteccloud | 1 Auto Web-based Database Management System | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function. | |||||
| CVE-2023-46475 | 1 Easycorp | 1 Zentao | 2026-06-17 | N/A | 5.4 MEDIUM |
| A Stored Cross-Site Scripting vulnerability was discovered in ZenTao 18.3 where a user can create a project, and in the name field of the project, they can inject malicious JavaScript code. | |||||
| CVE-2023-46471 | 1 Spaceapplications | 1 Yacms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer. | |||||
| CVE-2023-46470 | 1 Spaceapplications | 1 Yacms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser. | |||||
| CVE-2023-46467 | 1 Juzaweb | 1 Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page. | |||||
| CVE-2023-46451 | 1 Mayurik | 1 Best Courier Management System | 2026-06-17 | N/A | 5.4 MEDIUM |
| Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field. | |||||
| CVE-2023-46450 | 1 Mayurik | 1 Inventory Management System | 2026-06-17 | N/A | 5.4 MEDIUM |
| Sourcecodester Free and Open Source inventory management system 1.0 is vulnerable to Cross Site Scripting (XSS) via the Add supplier function. | |||||
| CVE-2023-46448 | 1 Dmpop | 1 Mejiro | 2026-06-17 | N/A | 6.1 MEDIUM |
| Reflected Cross-Site Scripting (XSS) vulnerability in dmpop Mejiro Commit Versions Prior To 3096393 allows attackers to run arbitrary code via crafted string in metadata of uploaded images. | |||||
| CVE-2023-46396 | 1 Web-audimex | 1 Audimex | 2026-06-17 | N/A | 5.4 MEDIUM |
| Audimex 15.0.0 is vulnerable to Cross Site Scripting (XSS) in /audimex/cgi-bin/wal.fcgi via company parameter search filters. | |||||
| CVE-2023-46394 | 1 Gougucms | 1 Gougucms | 2026-06-17 | N/A | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter. | |||||