Total
424294 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-25432 | 1 Online Reviewer Management System Project | 1 Online Reviewer Management System | 2026-06-17 | N/A | 7.2 HIGH |
| An issue was discovered in Online Reviewer Management System v1.0. There is a SQL injection that can directly issue instructions to the background database system via reviewer_0/admins/assessments/course/course-update.php. | |||||
| CVE-2023-25431 | 1 Online Reviewer Management System Project | 1 Online Reviewer Management System | 2026-06-17 | N/A | 4.8 MEDIUM |
| An issue was discovered in Online Reviewer Management System v1.0. There is a XSS vulnerability via reviewer_0/admins/assessments/course/course-update.php. | |||||
| CVE-2023-25428 | 1 Soft-o | 1 Free Password Manager | 2026-06-17 | N/A | 7.8 HIGH |
| A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution. | |||||
| CVE-2023-25415 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 5.3 MEDIUM |
| Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration. | |||||
| CVE-2023-25414 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 5.3 MEDIUM |
| Aten PE8108 2.4.232 is vulnerable to denial of service (DOS). | |||||
| CVE-2023-25413 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials. | |||||
| CVE-2023-25411 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 4.3 MEDIUM |
| Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF). | |||||
| CVE-2023-25409 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 8.1 HIGH |
| Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets. | |||||
| CVE-2023-25407 | 1 Aten | 2 Pe8108, Pe8108 Firmware | 2026-06-17 | N/A | 7.2 HIGH |
| Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access to administrator credentials. | |||||
| CVE-2023-25403 | 1 Yf-exam Project | 1 Yf-exam | 2026-06-17 | N/A | 7.5 HIGH |
| CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication. | |||||
| CVE-2023-25402 | 1 Yf-exam Project | 1 Yf-exam | 2026-06-17 | N/A | 7.5 HIGH |
| CleverStupidDog yf-exam 1.8.0 is vulnerable to File Upload. There is no restriction on the suffix of the uploaded file, resulting in any file upload. | |||||
| CVE-2023-25399 | 1 Scipy | 1 Scipy | 2026-06-17 | N/A | 5.5 MEDIUM |
| A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function. Note: This is disputed as a bug and not a vulnerability. SciPy is not designed to be exposed to untrusted users or data directly. | |||||
| CVE-2023-25396 | 1 Caphyon | 1 Advanced Installer | 2026-06-17 | N/A | 7.8 HIGH |
| Privilege escalation in the MSI repair functionality in Caphyon Advanced Installer 20.0 and below allows attackers to access and manipulate system files. | |||||
| CVE-2023-25395 | 1 Totolink | 2 A7100ru, A7100ru Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules. | |||||
| CVE-2023-25394 | 1 Getvideostream | 1 Videostream | 2026-06-17 | N/A | 7.0 HIGH |
| Videostream macOS app 0.5.0 and 0.4.3 has a Race Condition. The Updater privileged script attempts to update Videostream every 5 hours. | |||||
| CVE-2023-25369 | 1 Siglent | 6 Sds1074x-e, Sds1074x-e Firmware, Sds1104x-e and 3 more | 2026-06-17 | N/A | 7.5 HIGH |
| Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Denial of Service on the user interface triggered by malformed SCPI command. | |||||
| CVE-2023-25368 | 1 Siglent | 6 Sds1074x-e, Sds1074x-e Firmware, Sds1104x-e and 3 more | 2026-06-17 | N/A | 7.5 HIGH |
| Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS is vulnerable to Incorrect Access Control. An unauthenticated attacker can overwrite firmnware. | |||||
| CVE-2023-25367 | 1 Siglent | 6 Sds1074x-e, Sds1074x-e Firmware, Sds1104x-e and 3 more | 2026-06-17 | N/A | 9.8 CRITICAL |
| Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS allows unfiltered user input resulting in Remote Code Execution (RCE) with SCPI interface or web server. | |||||
| CVE-2023-25366 | 1 Siglent | 2 Sds 1104x-e, Sds 1104x-e Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| In Siglent SDS 1104X-E SDS1xx4X-E_V6.1.37R9.ADS, insecure SCPI interface discloses web password. | |||||
| CVE-2023-25365 | 1 Octobercms | 1 October | 2026-06-17 | N/A | 7.8 HIGH |
| Cross Site Scripting vulnerability found in October CMS v.3.2.0 allows local attacker to execute arbitrary code via the file type .mp3 | |||||