Vulnerabilities (CVE)

Total 421267 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-31925 1 Broadcom 1 Brocade Sannav 2026-06-17 N/A 5.4 MEDIUM
Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configuration failure causes an SNMP communication log dump.
CVE-2023-31923 1 Supremainc 1 Biostar 2 2026-06-17 N/A 8.8 HIGH
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker with "User Operator" privileges to create a highly privileged user account. The vulnerability is caused by missing server-side validation, which can be exploited to gain full administrator privileges on the system.
CVE-2023-31922 1 Quickjs Project 1 Quickjs 2026-06-17 N/A 7.5 HIGH
QuickJS commit 2788d71 was discovered to contain a stack-overflow via the component js_proxy_isArray at quickjs.c.
CVE-2023-31921 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the ecma_big_uint_div_mod at jerry-core/ecma/operations/ecma-big-uint.c.
CVE-2023-31920 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.
CVE-2023-31919 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the jcontext_raise_exception at jerry-core/jcontext/jcontext.c.
CVE-2023-31918 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c.
CVE-2023-31916 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the jmem_heap_finalize at jerry-core/jmem/jmem-heap.c.
CVE-2023-31914 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain out-of-memory issue in malloc.
CVE-2023-31913 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 5.5 MEDIUM
Jerryscript 3.0 *commit 1a2c047) was discovered to contain an Assertion Failure via the component parser_parse_class at jerry-core/parser/js/js-parser-expr.c.
CVE-2023-31910 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 7.8 HIGH
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component parser_parse_function_statement at /jerry-core/parser/js/js-parser-statm.c.
CVE-2023-31908 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 7.8 HIGH
Jerryscript 3.0 (commit 05dbbd1) was discovered to contain a heap-buffer-overflow via the component ecma_builtin_typedarray_prototype_sort.
CVE-2023-31907 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 7.8 HIGH
Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scanner_literal_is_created at /jerry-core/parser/js/js-scanner-util.c.
CVE-2023-31906 1 Jerryscript 1 Jerryscript 2026-06-17 N/A 7.8 HIGH
Jerryscript 3.0.0(commit 1a2c047) was discovered to contain a heap-buffer-overflow via the component lexer_compare_identifier_to_chars at /jerry-core/parser/js/js-lexer.c.
CVE-2023-31904 1 Savysoda 1 Wifi Hd Wireless Disk Drive 2026-06-17 N/A 7.5 HIGH
savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.
CVE-2023-31903 1 Freeguppy 1 Guppy 2026-06-17 N/A 9.8 CRITICAL
GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
CVE-2023-31902 1 Mobilemouse 1 Mobile Mouse 2026-06-17 N/A 9.8 CRITICAL
RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).
CVE-2023-31893 1 Telefonica 2 Brasil Vivo Play, Brasil Vivo Play Firmware 2026-06-17 N/A 7.5 HIGH
Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursion.
CVE-2023-31890 1 Glazedlists 1 Glazed Lists 2026-06-17 N/A 9.8 CRITICAL
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
CVE-2023-31889 2026-06-17 N/A 5.5 MEDIUM
An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request.