Vulnerabilities (CVE)

Total 424628 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23205 1 Mz-automation 1 Lib60870 2026-06-17 N/A 5.5 MEDIUM
An issue was discovered in lib60870 v2.3.2. There is a memory leak in lib60870/lib60870-C/examples/multi_client_server/multi_client_server.c.
CVE-2023-23192 1 Isdecisions 1 Userlock 2026-06-17 N/A 7.2 HIGH
IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task.
CVE-2023-23169 1 Synapsoft 1 Pdfocus 2026-06-17 N/A 6.5 MEDIUM
Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.
CVE-2023-23163 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 9.8 CRITICAL
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter.
CVE-2023-23162 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 9.8 CRITICAL
Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php.
CVE-2023-23161 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 6.1 MEDIUM
A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar.
CVE-2023-23158 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page.
CVE-2023-23157 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fullname parameter on the enquiry page.
CVE-2023-23156 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 9.8 CRITICAL
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.
CVE-2023-23155 1 Phpgurukul 1 Art Gallery Management System 2026-06-17 N/A 9.8 CRITICAL
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login.
CVE-2023-23151 1 Bloofox 1 Bloofoxcms 2026-06-17 N/A 6.5 MEDIUM
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.
CVE-2023-23150 1 Lancombg 2 Sa-wr915nd, Sa-wr915nd Firmware 2026-06-17 N/A 9.8 CRITICAL
SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution.
CVE-2023-23149 1 Dek-1705 Project 2 Dek-1705, Dek-1705 Firmware 2026-06-17 N/A 9.8 CRITICAL
DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability.
CVE-2023-23145 1 Gpac 1 Gpac 2026-06-17 N/A 7.8 HIGH
GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function.
CVE-2023-23144 1 Gpac 1 Gpac 2026-06-17 N/A 5.5 MEDIUM
Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master.
CVE-2023-23143 1 Gpac 1 Gpac 2026-06-17 N/A 7.8 HIGH
Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c. GPAC version 2.3-DEV-rev1-g4669ba229-master.
CVE-2023-23136 1 Lmxcms 1 Lmxcms 2026-06-17 N/A 6.5 MEDIUM
lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.
CVE-2023-23135 1 Ftdms Project 1 Ftdms 2026-06-17 N/A 7.2 HIGH
An arbitrary file upload vulnerability in Ftdms v3.1.6 allows attackers to execute arbitrary code via uploading a crafted JPG file.
CVE-2023-23132 1 Selfwealth 1 Selfwealth 2026-06-17 N/A 7.5 HIGH
Selfwealth iOS mobile App 3.3.1 is vulnerable to Sensitive key disclosure. The application reveals hardcoded API keys.
CVE-2023-23131 1 Selfwealth 1 Selfwealth 2026-06-17 N/A 7.5 HIGH
Selfwealth iOS mobile App 3.3.1 is vulnerable to Insecure App Transport Security (ATS) Settings.