Vulnerabilities (CVE)

Total 421867 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-29799 1 Totolink 2 X18, X18 Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function.
CVE-2023-29798 1 Totolink 2 X18, X18 Firmware 2026-06-17 N/A 9.8 CRITICAL
TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function.
CVE-2023-29791 1 Kodcloud 1 Kodbox 2026-06-17 N/A 6.1 MEDIUM
kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information.
CVE-2023-29790 1 Kodcloud 1 Kodbox 2026-06-17 N/A 7.5 HIGH
kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.
CVE-2023-29780 1 3reality 2 3rsb015bz, 3rsb015bz Firmware 2026-06-17 N/A 7.5 HIGH
Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes.
CVE-2023-29779 1 Sengled 2 E1e-g7f, E1e-g7f Firmware 2026-06-17 N/A 7.5 HIGH
Sengled Dimmer Switch V0.0.9 contains a denial of service (DOS) vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery after receiving the 'Set_short_poll_interval' command.
CVE-2023-29774 1 Iteachyou 1 Dreamer Cms 2026-06-17 N/A 5.4 MEDIUM
Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS).
CVE-2023-29772 1 Asus 2 Rt-ac51u, Rt-ac51u Firmware 2026-06-17 N/A 5.2 MEDIUM
A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up to and including 3.0.0.4.380.8591 allows remote attackers to inject arbitrary web script or HTML via a malicious network request.
CVE-2023-29770 1 Sapplica 1 Sentrifugo 2026-06-17 N/A 8.8 HIGH
In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering.
CVE-2023-29767 1 Appcrossx 1 Crossx 2026-06-17 N/A 5.5 MEDIUM
An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause a persistent denial of service via the database files.
CVE-2023-29766 1 Appcrossx 1 Crossx 2026-06-17 N/A 7.8 HIGH
An issue found in CrossX v.1.15.3 for Android allows a local attacker to cause an escalation of Privileges via the database files.
CVE-2023-29761 1 Urbanandroid 1 Sleep 2026-06-17 N/A 5.5 MEDIUM
An issue found in Sleep v.20230303 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.
CVE-2023-29759 1 Flightaware 1 Flightaware 2026-06-17 N/A 5.5 MEDIUM
An issue found in FlightAware v.5.8.0 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the database files.
CVE-2023-29758 1 Leap 1 Blue Light Filter 2026-06-17 N/A 5.5 MEDIUM
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.
CVE-2023-29757 1 Leap 1 Blue Light Filter 2026-06-17 N/A 7.8 HIGH
An issue found in Blue Light Filter v.1.5.5 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2023-29756 1 Urbanandroid 1 Twilight 2026-06-17 N/A 5.5 MEDIUM
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.
CVE-2023-29755 1 Urbanandroid 1 Twilight 2026-06-17 N/A 7.8 HIGH
An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.
CVE-2023-29753 1 Ekatox 1 Facemoji\ 2026-06-17 N/A 5.5 MEDIUM
An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows a local attacker to cause a denial of service via the SharedPreference files.
CVE-2023-29752 1 Ekatox 1 Facemoji Emoji Keyboard 2026-06-17 N/A 7.8 HIGH
An issue found in Facemoji Emoji Keyboard v.2.9.1.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component.
CVE-2023-29751 1 Yandex 1 Navigator 2026-06-17 N/A 5.5 MEDIUM
An issue found in Yandex Navigator v.6.60 for Android allows unauthorized apps to cause a persistent denial of service by manipulating the SharedPreference files.