Vulnerabilities (CVE)

Total 422304 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-27764 1 Wondershare 1 Repairit 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file.
CVE-2023-27763 1 Wondershare 1 Mobiletrans 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file.
CVE-2023-27762 1 Wondershare 1 Democreator 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file.
CVE-2023-27761 1 Wondershare 1 Uniconverter 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file.
CVE-2023-27760 1 Wondershare 1 Filmora 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe.
CVE-2023-27759 1 Wondershare 1 Edrawmind 2026-06-17 N/A 7.8 HIGH
An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file.
CVE-2023-27757 1 Perfree 1 Perfreeblog 2026-06-17 N/A 9.8 CRITICAL
An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.
CVE-2023-27755 1 71note 1 Go-bbs 2026-06-17 N/A 8.8 HIGH
go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download.
CVE-2023-27754 1 Vox2mesh Project 1 Vox2mesh 2026-06-17 N/A 5.5 MEDIUM
vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
CVE-2023-27748 1 Blackvue 4 Dr750-2ch Ir Lte, Dr750-2ch Ir Lte Firmware, Dr750-2ch Lte and 1 more 2026-06-17 N/A 9.8 CRITICAL
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authenticity check for uploaded firmware. This can allow attackers to upload crafted firmware which contains backdoors and enables arbitrary code execution.
CVE-2023-27747 1 Blackvue 4 Dr750-2ch Ir Lte, Dr750-2ch Ir Lte Firmware, Dr750-2ch Lte and 1 more 2026-06-17 N/A 7.5 HIGH
BlackVue DR750-2CH LTE v.1.012_2022.10.26 does not employ authentication in its web server. This vulnerability allows attackers to access sensitive information such as configurations and recordings.
CVE-2023-27746 1 Blackvue 4 Dr750-2ch Ir Lte, Dr750-2ch Ir Lte Firmware, Dr750-2ch Lte and 1 more 2026-06-17 N/A 9.8 CRITICAL
BlackVue DR750-2CH LTE v.1.012_2022.10.26 was discovered to contain a weak default passphrase which can be easily cracked via a brute force attack if the WPA2 handshake is intercepted.
CVE-2023-27745 1 Southrivertech 1 Titan Ftp Server Nextgen 2026-06-17 N/A 8.8 HIGH
An issue in South River Technologies TitanFTP Before v2.0.1.2102 allows attackers with low-level privileges to perform Administrative actions by sending requests to the user server.
CVE-2023-27744 1 Southrivertech 1 Titan Ftp Server Nextgen 2026-06-17 N/A 7.8 HIGH
An issue was discovered in South River Technologies TitanFTP NextGen server that allows for a vertical privilege escalation leading to remote code execution.
CVE-2023-27742 1 Idurarapp 1 Idurar 2026-06-17 N/A 9.8 CRITICAL
IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login.
CVE-2023-27739 1 Easyxdm 1 Easyxdm 2026-06-17 N/A 6.1 MEDIUM
easyXDM 2.5 allows XSS via the xdm_e parameter.
CVE-2023-27734 1 Edb-debugger Project 1 Edb-debugger 2026-06-17 N/A 5.5 MEDIUM
An issue found in Eteran edb-debugger v.1.3.0 allows a local attacker to causea denial of service via the collect_symbols function in plugins/BinaryInfo/symbols.cpp.
CVE-2023-27733 1 Dedecms 1 Dedecms 2026-06-17 N/A 7.2 HIGH
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/sys_sql_query.php.
CVE-2023-27730 1 F5 1 Njs 2026-06-17 N/A 7.5 HIGH
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_lvlhsh_find at src/njs_lvlhsh.c.
CVE-2023-27729 1 F5 1 Njs 2026-06-17 N/A 7.5 HIGH
Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.