Total
421468 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-29908 | 1 H3c | 1 Magic R200 Firmware | 2026-06-17 | N/A | 4.9 MEDIUM |
| H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the SetMobileAPInfoById interface at /goform/aspForm. | |||||
| CVE-2023-29907 | 1 H3c | 1 Magic R200 Firmware | 2026-06-17 | N/A | 4.9 MEDIUM |
| H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID_5G interface at /goform/aspForm. | |||||
| CVE-2023-29906 | 1 H3c | 1 Magic R200 Firmware | 2026-06-17 | N/A | 4.9 MEDIUM |
| H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the Edit_BasicSSID interface at /goform/aspForm. | |||||
| CVE-2023-29905 | 1 H3c | 1 Magic R200 Firmware | 2026-06-17 | N/A | 4.9 MEDIUM |
| H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the UpdateSnat interface at /goform/aspForm. | |||||
| CVE-2023-29887 | 1 Nuovo | 1 Spreadsheet-reader | 2026-06-17 | N/A | 7.5 HIGH |
| A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitrary files via the File parameter. | |||||
| CVE-2023-29881 | 1 Phpok | 1 Phpok | 2026-06-17 | N/A | 6.5 MEDIUM |
| phpok 6.4.003 is vulnerable to SQL injection in the function index_f() in phpok64/framework/api/call_control.php. | |||||
| CVE-2023-29868 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 6.5 MEDIUM |
| Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized changes on articles where they only have customer permissions. | |||||
| CVE-2023-29867 | 1 Zammad | 1 Zammad | 2026-06-17 | N/A | 6.5 MEDIUM |
| Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved in their tickets using the Zammad API. | |||||
| CVE-2023-29862 | 1 Agasio Camera Project | 2 Agasio Camera, Agasio Camera Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in Agasio-Camera device version not specified allows a remote attacker to execute arbitrary code via the check and authLevel parameters. | |||||
| CVE-2023-29861 | 1 Flir | 2 Dvtel Camera, Dvtel Camera Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in FLIR-DVTEL version not specified allows a remote attacker to execute arbitrary code via a crafted request to the management page of the device. | |||||
| CVE-2023-29860 | 1 Dtstack | 1 Taier | 2026-06-17 | N/A | 7.5 HIGH |
| An insecure permissions in /Taier/API/tenant/listTenant interface in DTStack Taier 1.3.0 allows attackers to view sensitive information via the getCookie method. | |||||
| CVE-2023-29857 | 1 Teslamate | 1 Teslamate | 2026-06-17 | N/A | 5.3 MEDIUM |
| An issue in Teslamate v1.27.1 allows attackers to obtain sensitive information via directly accessing the teslamate link. | |||||
| CVE-2023-29856 | 1 Dlink | 2 Dir-868l, Dir-868l Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary. | |||||
| CVE-2023-29855 | 1 Wbce | 1 Wbce Cms | 2026-06-17 | N/A | 7.2 HIGH |
| WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php. | |||||
| CVE-2023-29854 | 1 Dircms Project | 1 Dircms | 2026-06-17 | N/A | 6.1 MEDIUM |
| DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground. | |||||
| CVE-2023-29850 | 1 Slims | 1 Senayan Library Management System | 2026-06-17 | N/A | 7.5 HIGH |
| SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information. | |||||
| CVE-2023-29849 | 1 Hockeycomputindo | 1 Bang Resto | 2026-06-17 | N/A | 8.8 HIGH |
| Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter. | |||||
| CVE-2023-29848 | 1 Hockeycomputindo | 1 Bang Resto | 2026-06-17 | N/A | 4.8 MEDIUM |
| Bang Resto 1.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the itemName parameter in the admin/menu.php Add New Menu function. | |||||
| CVE-2023-29847 | 1 Aerocms Project | 1 Aerocms | 2026-06-17 | N/A | 5.4 MEDIUM |
| AeroCMS v0.0.1 was discovered to contain multiple stored cross-site scripting (XSS) vulnerabilities via the comment_author and comment_content parameters at /post.php. These vulnerabilities allow attackers to execute arbitrary web scripts or HTML via a crafted payload. | |||||
| CVE-2023-29842 | 1 Churchcrm | 1 Churchcrm | 2026-06-17 | N/A | 8.8 HIGH |
| ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection (Time-based) via the EN_tyid POST parameter. | |||||