Vulnerabilities (CVE)

Total 421460 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-29973 1 Pfsense 1 Pfsense 2026-06-17 N/A 4.9 MEDIUM
Pfsense CE version 2.6.0 is vulnerable to No rate limit which can lead to an attacker creating multiple malicious users in firewall.
CVE-2023-29963 1 S-cms 1 S-cms 2026-06-17 N/A 7.2 HIGH
S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php.
CVE-2023-29962 1 S-cms 1 S-cms 2026-06-17 N/A 6.5 MEDIUM
S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability.
CVE-2023-29961 1 Dlink 2 Dir-605l, Dir-605l Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR-605L firmware version 1.17B01 BETA is vulnerable to stack overflow via /goform/formTcpipSetup,
CVE-2023-29950 1 Swftools 1 Swftools 2026-06-17 N/A 5.5 MEDIUM
swfrender v0.9.2 was discovered to contain a heap buffer overflow in the function enumerateUsedIDs_fillstyle at modules/swftools.c
CVE-2023-29944 1 Metersphere 1 Metersphere 2026-06-17 N/A 9.8 CRITICAL
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench
CVE-2023-29942 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::Type::isa<mlir::LLVM::LLVMVoidType.
CVE-2023-29941 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component matchAndRewriteSortOp<mlir::sparse_tensor::SortOp>(mlir::sparse_tensor::SortOp.
CVE-2023-29939 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit a0138390 was discovered to contain a segmentation fault via the component mlir::spirv::TargetEnv::TargetEnv(mlir::spirv::TargetEnvAttr).
CVE-2023-29935 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit a0138390 was discovered to contain an assertion failure at !replacements.count(op) && "operation was already replaced.
CVE-2023-29934 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit 6c01b5c was discovered to contain a segmentation fault via the component mlir::Type::getDialect().
CVE-2023-29933 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
CVE-2023-29932 1 Llvm 1 Llvm 2026-06-17 N/A 5.5 MEDIUM
llvm-project commit fdbc55a5 was discovered to contain a segmentation fault via the component mlir::IROperand<mlir::OpOperand.
CVE-2023-29931 1 Laravels Project 1 Laravels 2026-06-17 N/A 9.8 CRITICAL
laravel-s 3.7.35 is vulnerable to Local File Inclusion via /src/Illuminate/Laravel.php.
CVE-2023-29930 1 Genesys 1 Tftp Server 2026-06-17 N/A 8.8 HIGH
An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page.
CVE-2023-29927 1 Sage 1 Sage 300 2026-06-17 N/A 4.3 MEDIUM
Versions of Sage 300 through 2022 implement role-based access controls that are only enforced client-side. Low-privileged Sage users, particularly those on a workstation setup in the "Windows Peer-to-Peer Network" or "Client Server Network" Sage 300 configurations, could recover the SQL connection strings being used by Sage 300 and interact directly with the underlying database(s) to create, update, and delete all company records, bypassing the program’s role-based access controls.
CVE-2023-29926 1 Powerjob 1 Powerjob 2026-06-17 N/A 9.8 CRITICAL
PowerJob V4.3.2 has unauthorized interface that causes remote code execution.
CVE-2023-29924 1 Powerjob 1 Powerjob 2026-06-17 N/A 9.8 CRITICAL
PowerJob V4.3.1 is vulnerable to Incorrect Access Control that allows for remote code execution.
CVE-2023-29923 1 Powerjob 1 Powerjob 2026-06-17 N/A 5.3 MEDIUM
PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
CVE-2023-29922 1 Powerjob 1 Powerjob 2026-06-17 N/A 5.3 MEDIUM
PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.