Vulnerabilities (CVE)

Filtered by NVD-CWE-noinfo
Total 36333 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-39050 1 Lycorp 1 Line Mini App 2026-06-17 N/A 7.5 HIGH
An information leak in Daiky-value.Fukueten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39048 1 Lycorp 1 Line Mini App 2026-06-17 N/A 7.5 HIGH
An information leak in Tokudaya.honten v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39047 1 Lycorp 1 Line Mini App 2026-06-17 N/A 7.5 HIGH
An information leak in shouzu sweets oz v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39045 1 Kokoroe Members Card Project 1 Kokoroe Members Card 2026-06-17 N/A 6.5 MEDIUM
An information leak in kokoroe_members card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39044 1 Ajino-shiretoko Project 1 Ajino-shiretoko 2026-06-17 N/A 6.5 MEDIUM
An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39042 1 Lycorp 1 Line Mini App 2026-06-17 N/A 7.5 HIGH
An information leak in Gyouza-newhushimi v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-39041 1 Kukurudeli Project 1 Kukurudeli 2026-06-17 N/A 6.5 MEDIUM
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages.
CVE-2023-38996 1 Douran 1 Dsgate 2026-06-17 N/A 6.7 MEDIUM
An issue in all versions of Douran DSGate allows a local authenticated privileged attacker to execute arbitrary code via the debug command.
CVE-2023-38990 1 Jeesite 1 Jeesite 2026-06-17 N/A 4.3 MEDIUM
An issue in the delete function in the MenuController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete menus created by the Administrator.
CVE-2023-38988 1 Jeesite 1 Jeesite 2026-06-17 N/A 4.3 MEDIUM
An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators.
CVE-2023-38946 1 Multilaser 2 Re160, Re160 Firmware 2026-06-17 N/A 8.8 HIGH
An issue in Multilaser RE160 firmware v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01 allows attackers to bypass the access control and gain complete access to the application via supplying a crafted cookie.
CVE-2023-38945 1 Multilaser 6 Re160, Re160 Firmware, Re160v and 3 more 2026-06-17 N/A 9.8 CRITICAL
Multilaser RE160 v5.07.51_pt_MTL01 and v5.07.52_pt_MTL01, Multilaser RE160V v12.03.01.08_pt and V12.03.01.09_pt, and Multilaser RE163V v12.03.01.08_pt allows attackers to bypass the access control and gain complete access to the application via supplying a crafted URL.
CVE-2023-38909 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2026-06-17 N/A 6.5 MEDIUM
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the IV component in the AES128-CBC function.
CVE-2023-38908 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2026-06-17 N/A 6.5 MEDIUM
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function.
CVE-2023-38907 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2026-06-17 N/A 7.5 HIGH
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key.
CVE-2023-38906 1 Tp-link 3 Tapo, Tapo L530e, Tapo L530e Firmware 2026-06-17 N/A 6.5 MEDIUM
An issue in TPLink Smart Bulb Tapo series L530 1.1.9, L510E 1.0.8, L630 1.0.3, P100 1.4.9, Smart Camera Tapo series C200 1.1.18, and Tapo Application 2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message.
CVE-2023-38849 1 Linecorp 1 Line 2026-06-17 N/A 7.5 HIGH
An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38848 1 Linecorp 1 Line 2026-06-17 N/A 7.5 HIGH
An issue in rmc R Beauty CLINIC Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38847 1 Linecorp 1 Line 2026-06-17 N/A 7.5 HIGH
An issue in CHRISTINA JAPAN Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.
CVE-2023-38846 1 Linecorp 1 Line 2026-06-17 N/A 7.5 HIGH
An issue in Marbre Lapin Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request.