Total
421267 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-31719 | 1 Frangoteam | 1 Fuxa | 2026-06-17 | N/A | 9.8 CRITICAL |
| FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin. | |||||
| CVE-2023-31718 | 1 Frangoteam | 1 Fuxa | 2026-06-17 | N/A | 7.5 HIGH |
| FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download. | |||||
| CVE-2023-31717 | 1 Frangoteam | 1 Fuxa | 2026-06-17 | N/A | 7.5 HIGH |
| A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database. | |||||
| CVE-2023-31716 | 1 Frangoteam | 1 Fuxa | 2026-06-17 | N/A | 7.5 HIGH |
| FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log | |||||
| CVE-2023-31714 | 1 Waqaskanju | 1 Chitor-cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Chitor-CMS before v1.1.2 was discovered to contain multiple SQL injection vulnerabilities. | |||||
| CVE-2023-31710 | 1 Tp-link | 2 Archer Ax21, Archer Ax21 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| TP-Link Archer AX21(US)_V3_1.1.4 Build 20230219 and AX21(US)_V3.6_1.1.4 Build 20230219 are vulnerable to Buffer Overflow. | |||||
| CVE-2023-31708 | 1 Eyoucms | 1 Eyoucms | 2026-06-17 | N/A | 4.3 MEDIUM |
| A Cross-Site Request Forgery (CSRF) in EyouCMS v1.6.2 allows attackers to execute arbitrary commands via a supplying a crafted HTML file to the Upload software format function. | |||||
| CVE-2023-31707 | 1 Sem-cms | 1 Semcms | 2026-06-17 | N/A | 9.8 CRITICAL |
| SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. | |||||
| CVE-2023-31705 | 1 Task Reminder System Project | 1 Task Reminder System | 2026-06-17 | N/A | 5.4 MEDIUM |
| A Reflected Cross-site scripting (XSS) vulnerability in Sourcecodester Task Reminder System 1.0 allows an authenticated user to inject malicious javascript into the page parameter. | |||||
| CVE-2023-31704 | 1 Oretnom23 | 1 Online Computer And Laptop Store | 2026-06-17 | N/A | 9.8 CRITICAL |
| Sourcecodester Online Computer and Laptop Store 1.0 is vulnerable to Incorrect Access Control, which allows remote attackers to elevate privileges to the administrator's role. | |||||
| CVE-2023-31703 | 1 Escanav | 1 Escan Management Console | 2026-06-17 | N/A | 9.0 CRITICAL |
| Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter. | |||||
| CVE-2023-31702 | 1 Escanav | 1 Escan Management Console | 2026-06-17 | N/A | 7.2 HIGH |
| SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1. | |||||
| CVE-2023-31701 | 1 Tp-link | 2 Tl-wpa4530 Kit, Tl-wpa4530 Kit Firmware | 2026-06-17 | N/A | 8.8 HIGH |
| TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove. | |||||
| CVE-2023-31700 | 1 Tp-link | 2 Tl-wpa4530 Kit, Tl-wpa4530 Kit Firmware | 2026-06-17 | N/A | 8.8 HIGH |
| TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd. | |||||
| CVE-2023-31699 | 1 Churchcrm | 1 Churchcrm | 2026-06-17 | N/A | 4.8 MEDIUM |
| ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file. | |||||
| CVE-2023-31689 | 1 Wcms | 1 Wcms | 2026-06-17 | N/A | 9.8 CRITICAL |
| In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution. | |||||
| CVE-2023-31679 | 1 Videogo Project | 1 Videogo | 2026-06-17 | N/A | 7.5 HIGH |
| Incorrect access control in Videogo v6.8.1 allows attackers to access images from other devices via modification of the Device Id parameter. | |||||
| CVE-2023-31678 | 1 Videogo Project | 1 Videogo | 2026-06-17 | N/A | 5.3 MEDIUM |
| Incorrect access control in Videogo v6.8.1 allows attackers to bind shared devices after the connection has been ended. | |||||
| CVE-2023-31677 | 1 Luowice | 1 Luowice | 2026-06-17 | N/A | 7.5 HIGH |
| Insecure permissions in luowice 3.5.18 allow attackers to view information for other alarm devices via modification of the eseeid parameter. | |||||
| CVE-2023-31672 | 1 Ai-dev | 1 Ailinear | 2026-06-17 | N/A | 9.8 CRITICAL |
| In the PrestaShop < 2.4.3 module "Length, weight or volume sell" (ailinear) there is a SQL injection vulnerability. | |||||