Vulnerabilities (CVE)

Total 422304 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-27728 1 F5 1 Njs 2026-06-17 N/A 7.5 HIGH
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.
CVE-2023-27727 1 F5 1 Njs 2026-06-17 N/A 7.5 HIGH
Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_function_frame at src/njs_function.h.
CVE-2023-27720 1 Dlink 2 Dir-878, Dir-878 Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27719 1 Dlink 2 Dir878, Dir878 Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27718 1 Dlink 2 Dir878, Dir878 Firmware 2026-06-17 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27716 1 Kafkaui-lite Project 1 Kafkaui-lite 2026-06-17 N/A 9.8 CRITICAL
An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nodes running on it.
CVE-2023-27711 1 Typecho 1 Typecho 2026-06-17 N/A 4.8 MEDIUM
Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component.
CVE-2023-27709 1 Dedecms 1 Dedecms 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.
CVE-2023-27707 1 Dedecms 1 Dedecms 2026-06-17 N/A 7.2 HIGH
SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint.
CVE-2023-27706 1 Bitwarden 1 Bitwarden 2026-06-17 N/A 7.1 HIGH
Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes.
CVE-2023-27705 1 Apng Optimizer Project 1 Apng Optimizer 2026-06-17 N/A 7.5 HIGH
APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png.
CVE-2023-27704 1 Voidtools 1 Everything 2026-06-17 N/A 5.5 MEDIUM
Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS).
CVE-2023-27703 1 Mypikpak 1 Pikpak 2026-06-17 N/A 3.3 LOW
The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface.
CVE-2023-27701 1 Muyucms 1 Muyucms 2026-06-17 N/A 8.1 HIGH
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html.
CVE-2023-27700 1 Muyucms Project 1 Muyucms 2026-06-17 N/A 8.1 HIGH
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html.
CVE-2023-27654 1 Whoapp 1 Who 2026-06-17 N/A 9.8 CRITICAL
An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component.
CVE-2023-27653 1 Whoapp 1 Who 2026-06-17 N/A 7.5 HIGH
An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreference files.
CVE-2023-27652 1 Egostudiogroup 1 Super Clean 2026-06-17 N/A 5.5 MEDIUM
An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file.
CVE-2023-27651 1 Egostudiogroup 1 Super Clean 2026-06-17 N/A 7.8 HIGH
An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info field of the _default_.xml file.
CVE-2023-27650 1 Apusapps 1 Launcher 2026-06-17 N/A 9.8 CRITICAL
An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parameter.