Total
421267 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-31618 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the sqlc_union_dt_wrap component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31617 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the dk_set_delete component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31616 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the bif_mod component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31615 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the chash_array component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31614 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the mp_box_deserialize_string function in openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) after running a SELECT statement. | |||||
| CVE-2023-31613 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the __nss_database_lookup component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31612 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the dfe_qexp_list component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31611 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the __libc_longjmp component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31610 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the _IO_default_xsputn component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31609 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the dfe_unit_col_loci component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31608 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the artm_div_int component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31607 | 1 Openlinksw | 1 Virtuoso | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the __libc_malloc component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements. | |||||
| CVE-2023-31606 | 1 Promptworks | 1 Redcloth | 2026-06-17 | N/A | 7.5 HIGH |
| A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload. | |||||
| CVE-2023-31597 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 6.5 MEDIUM |
| An issue in Zammad v5.4.0 allows attackers to bypass e-mail verification using an arbitrary address and manipulate the data of the generated user. Attackers are also able to gain unauthorized access to existing tickets. | |||||
| CVE-2023-31587 | 1 Tenda | 2 Ac5, Ac5 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda AC5 router V15.03.06.28 was discovered to contain a remote code execution (RCE) vulnerability via the Mac parameter at ip/goform/WriteFacMac. | |||||
| CVE-2023-31585 | 2026-06-17 | N/A | 9.8 CRITICAL | ||
| Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php. | |||||
| CVE-2023-31584 | 1 Silicon Project | 1 Silicon | 2026-06-17 | N/A | 6.1 MEDIUM |
| GitHub repository cu/silicon commit a9ef36 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the User Input field. | |||||
| CVE-2023-31582 | 1 Jose4j Project | 1 Jose4j | 2026-06-17 | N/A | 7.5 HIGH |
| jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less. | |||||
| CVE-2023-31581 | 1 Dromara | 1 Sureness | 2026-06-17 | N/A | 9.8 CRITICAL |
| Dromara Sureness before v1.0.8 was discovered to use a hardcoded key. | |||||
| CVE-2023-31580 | 1 Networknt | 1 Light-oauth2 | 2026-06-17 | N/A | 5.9 MEDIUM |
| light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token. | |||||