Total
421292 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-30257 | 1 Fiio | 2 M6, M6 Firmware | 2026-06-17 | N/A | 7.8 HIGH |
| A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root. | |||||
| CVE-2023-30256 | 1 Webkul | 1 Qloapps | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file. | |||||
| CVE-2023-30253 | 1 Dolibarr | 1 Dolibarr Erp\/crm | 2026-06-17 | N/A | 8.8 HIGH |
| Dolibarr before 17.0.1 allows remote code execution by an authenticated user via an uppercase manipulation: <?PHP instead of <?php in injected data. | |||||
| CVE-2023-30247 | 1 Storage Unit Rental Management System Project | 1 Storage Unit Rental Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| File Upload vulnerability found in Oretnom23 Storage Unit Rental Management System v.1.0 allows a remote attacker to execute arbitrary code via the update_settings parameter. | |||||
| CVE-2023-30246 | 1 Judging Management System Project | 1 Judging Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the contestant_id parameter. | |||||
| CVE-2023-30245 | 1 Judging Management System Project | 1 Judging Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| SQL injection vulnerability found in Judging Management System v.1.0 allows a remote attacker to execute arbitrary code via the crit_id parameter of the edit_criteria.php file. | |||||
| CVE-2023-30226 | 1 Rizin | 1 Rizin | 2026-06-17 | N/A | 5.5 MEDIUM |
| An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file. | |||||
| CVE-2023-30223 | 1 4d | 1 Server | 2026-06-17 | N/A | 7.5 HIGH |
| A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions. | |||||
| CVE-2023-30222 | 1 4d | 1 Server | 2026-06-17 | N/A | 7.5 HIGH |
| An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping. | |||||
| CVE-2023-30216 | 1 Newbee-mall Project | 1 Newbee-mall | 2026-06-17 | N/A | 5.4 MEDIUM |
| Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information. | |||||
| CVE-2023-30212 | 1 Ourphp | 1 Ourphp | 2026-06-17 | N/A | 6.1 MEDIUM |
| OURPHP <= 7.2.0 is vulnerale to Cross Site Scripting (XSS) via /client/manage/ourphp_out.php. | |||||
| CVE-2023-30211 | 1 Ourphp | 1 Ourphp | 2026-06-17 | N/A | 9.8 CRITICAL |
| OURPHP <= 7.2.0 is vulnerable to SQL Injection. | |||||
| CVE-2023-30210 | 1 Ourphp | 1 Ourphp | 2026-06-17 | N/A | 6.1 MEDIUM |
| OURPHP <= 7.2.0 is vulnerable to Cross Site Scripting (XSS) via ourphp_tz.php. | |||||
| CVE-2023-30207 | 1 Kodi | 1 Kodi | 2026-06-17 | N/A | 5.5 MEDIUM |
| A divide by zero issue discovered in Kodi Home Theater Software 19.5 and earlier allows attackers to cause a denial of service via use of crafted mp3 file. | |||||
| CVE-2023-30205 | 1 Douphp | 1 Douphp | 2026-06-17 | N/A | 4.8 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in DouPHP v1.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique_id parameter in /admin/article.php. | |||||
| CVE-2023-30204 | 1 Judging Management System Project | 1 Judging Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the judge_id parameter at /php-jms/edit_judge.php. | |||||
| CVE-2023-30203 | 1 Judging Management System Project | 1 Judging Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the event_id parameter at /php-jms/result_sheet.php. | |||||
| CVE-2023-30200 | 1 Advancedplugins | 1 Ultimateimagetool | 2026-06-17 | N/A | 7.5 HIGH |
| In the module “Image: WebP, Compress, Zoom, Lazy load, Alt & More” (ultimateimagetool) in versions up to 2.1.02 from Advanced Plugins for PrestaShop, a guest can download personal informations without restriction by performing a path traversal attack. | |||||
| CVE-2023-30199 | 1 Webbax | 1 Customexporter | 2026-06-17 | N/A | 7.5 HIGH |
| Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/download.php. | |||||
| CVE-2023-30198 | 1 Webbax | 1 Winbizpayment | 2026-06-17 | N/A | 7.5 HIGH |
| Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php. | |||||