Vulnerabilities (CVE)

Total 421267 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-31973 1 Tortall 1 Yasm 2026-06-17 N/A 5.5 MEDIUM
yasm v1.3.0 was discovered to contain a use after free via the function expand_mmac_params at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
CVE-2023-31972 1 Tortall 1 Yasm 2026-06-17 N/A 5.5 MEDIUM
yasm v1.3.0 was discovered to contain a use after free via the function pp_getline at /nasm/nasm-pp.c. Note: Multiple third parties dispute this as a bug and not a vulnerability according to the YASM security policy.
CVE-2023-31946 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the artical.php.
CVE-2023-31945 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the id parameter at daily_expenditure_edit.php.
CVE-2023-31944 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_edit.php.
CVE-2023-31943 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the ticket_id parameter at ticket_detail.php.
CVE-2023-31942 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 4.8 MEDIUM
Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php.
CVE-2023-31941 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
File Upload vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via a crafted PHP file to the employee_insert.php.
CVE-2023-31940 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the page_id parameter at article_edit.php.
CVE-2023-31939 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomer_id parameter at customer_edit.php.
CVE-2023-31938 1 Online Travel Agency System Project 1 Online Travel Agency System 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the emp_id parameter at employee_detail.php.
CVE-2023-31937 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 7.2 HIGH
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.
CVE-2023-31936 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 7.2 HIGH
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.
CVE-2023-31935 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 4.8 MEDIUM
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php.
CVE-2023-31934 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 4.8 MEDIUM
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php.
CVE-2023-31933 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 7.2 HIGH
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.
CVE-2023-31932 1 Phpgurukul 1 Rail Pass Management System 2026-06-17 N/A 7.2 HIGH
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file.
CVE-2023-31928 1 Broadcom 1 Brocade Fabric Operating System 2026-06-17 N/A 6.3 MEDIUM
A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade Fabric OS version before Brocade Fabric OS v9.2.0 that could allow a remote unauthenticated attacker to execute arbitrary JavaScript code in a target user’s session with the Brocade Webtools application.
CVE-2023-31927 1 Broadcom 1 Brocade Fabric Operating System 2026-06-17 N/A 5.3 MEDIUM
An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 and v9.1.1c, could allow a remote unauthenticated attacker to get technical details about the web interface.
CVE-2023-31926 1 Broadcom 1 Brocade Fabric Operating System 2026-06-17 N/A 7.1 HIGH
System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c and v9.2.0.