Total
424021 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-27719 | 1 Dlink | 2 Dir878, Dir878 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |||||
| CVE-2023-27718 | 1 Dlink | 2 Dir878, Dir878 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload. | |||||
| CVE-2023-27716 | 1 Kafkaui-lite Project | 1 Kafkaui-lite | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue was discovered in freakchicken kafkaUI-lite 1.2.11 allows attackers on the same network to gain escalated privileges for the nodes running on it. | |||||
| CVE-2023-27711 | 1 Typecho | 1 Typecho | 2026-06-17 | N/A | 4.8 MEDIUM |
| Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component. | |||||
| CVE-2023-27709 | 1 Dedecms | 1 Dedecms | 2026-06-17 | N/A | 7.2 HIGH |
| SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint. | |||||
| CVE-2023-27707 | 1 Dedecms | 1 Dedecms | 2026-06-17 | N/A | 7.2 HIGH |
| SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint. | |||||
| CVE-2023-27706 | 1 Bitwarden | 1 Bitwarden | 2026-06-17 | N/A | 7.1 HIGH |
| Bitwarden Windows desktop application versions prior to v2023.4.0 store biometric keys in Windows Credential Manager, accessible to other local unprivileged processes. | |||||
| CVE-2023-27705 | 1 Apng Optimizer Project | 1 Apng Optimizer | 2026-06-17 | N/A | 7.5 HIGH |
| APNG_Optimizer v1.4 was discovered to contain a buffer overflow via the component /apngopt/ubuntu.png. | |||||
| CVE-2023-27704 | 1 Voidtools | 1 Everything | 2026-06-17 | N/A | 5.5 MEDIUM |
| Void Tools Everything lower than v1.4.1.1022 was discovered to contain a Regular Expression Denial of Service (ReDoS). | |||||
| CVE-2023-27703 | 1 Mypikpak | 1 Pikpak | 2026-06-17 | N/A | 3.3 LOW |
| The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. | |||||
| CVE-2023-27701 | 1 Muyucms | 1 Muyucms | 2026-06-17 | N/A | 8.1 HIGH |
| MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html. | |||||
| CVE-2023-27700 | 1 Muyucms Project | 1 Muyucms | 2026-06-17 | N/A | 8.1 HIGH |
| MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html. | |||||
| CVE-2023-27654 | 1 Whoapp | 1 Who | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component. | |||||
| CVE-2023-27653 | 1 Whoapp | 1 Who | 2026-06-17 | N/A | 7.5 HIGH |
| An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a denial of service via the SharedPreference files. | |||||
| CVE-2023-27652 | 1 Egostudiogroup | 1 Super Clean | 2026-06-17 | N/A | 5.5 MEDIUM |
| An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file. | |||||
| CVE-2023-27651 | 1 Egostudiogroup | 1 Super Clean | 2026-06-17 | N/A | 7.8 HIGH |
| An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the update_info field of the _default_.xml file. | |||||
| CVE-2023-27650 | 1 Apusapps | 1 Launcher | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parameter. | |||||
| CVE-2023-27649 | 1 Bestools | 1 Trusted Tools Free Music | 2026-06-17 | N/A | 7.5 HIGH |
| SQL injection vulnerability found in Trusted Tools Free Music v.2.1.0.47, v.2.0.0.46, v.1.9.1.45, v.1.8.2.43 allows a remote attacker to cause a denial of service via the search history table | |||||
| CVE-2023-27648 | 1 Timmystudios | 1 Change Color Of Keypad | 2026-06-17 | N/A | 9.8 CRITICAL |
| Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to execute arbitrary code via the dex file in the internal storage. | |||||
| CVE-2023-27647 | 1 Dualspace | 1 Lock Master | 2026-06-17 | N/A | 7.1 HIGH |
| An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method. | |||||