Vulnerabilities (CVE)

Total 424899 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-1699 1 Rapid7 1 Nexpose 2026-06-17 N/A 4.3 MEDIUM
Rapid7 Nexpose versions 6.6.186 and below suffer from a forced browsing vulnerability.  This vulnerability allows an attacker to manipulate URLs to forcefully browse to and access administrative pages. This vulnerability is fixed in version 6.6.187.  
CVE-2023-1698 1 Wago 14 Compact Controller 100, Compact Controller 100 Firmware, Edge Controller and 11 more 2026-06-17 N/A 9.8 CRITICAL
In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system compromise.
CVE-2023-1697 1 Juniper 6 Junos, Ptx1000, Qfx10000 and 3 more 2026-06-17 N/A 6.5 MEDIUM
An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service (DoS). Continued receipt of these specific frames will cause a sustained Denial of Service condition. This issue occurs when a specific malformed ethernet frame is received. This issue affects Juniper Networks Junos OS on QFX10000 Series, PTX1000 Series Series: All versions prior to 19.4R3-S10; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S6; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S5; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S3; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S1; 22.1 versions prior to 22.1R2-S1, 22.1R3; 22.2 versions prior to 22.2R1-S2, 22.2R2.
CVE-2023-1696 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
The multimedia video module has a vulnerability in data processing.Successful exploitation of this vulnerability may affect availability.
CVE-2023-1695 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2023-1694 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
CVE-2023-1693 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.
CVE-2023-1692 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.
CVE-2023-1691 1 Huawei 2 Emui, Harmonyos 2026-06-17 N/A 7.5 HIGH
Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVE-2023-1690 1 Earnings And Expense Tracker App Project 1 Earnings And Expense Tracker App 2026-06-17 4.0 MEDIUM 3.5 LOW
A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown processing of the file LoginRegistration.php?a=register_user. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The identifier VDB-224309 was assigned to this vulnerability.
CVE-2023-1689 1 Earnings And Expense Tracker App Project 1 Earnings And Expense Tracker App 2026-06-17 4.0 MEDIUM 3.5 LOW
A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file Master.php?a=save_earning. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-224308.
CVE-2023-1688 1 Oretnom23 1 Earnings And Expense Tracker Application 2026-06-17 4.0 MEDIUM 3.5 LOW
A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Master.php?a=save_expense. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-224307.
CVE-2023-1687 1 Task Allocation System Project 1 Task Allocation System 2026-06-17 4.0 MEDIUM 3.5 LOW
A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file LoginRegistration.php?a=register_user. The manipulation of the argument Fullname leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-224244.
CVE-2023-1686 1 Young Entrepreneur E-negosyo System Project 1 Young Entrepreneur E-negosyo System 2026-06-17 4.0 MEDIUM 3.5 LOW
A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file bsenordering/admin/category/index.php of the component GET Parameter Handler. The manipulation of the argument view with the input <script>alert(233)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224243.
CVE-2023-1685 1 Hadsky 1 Hadsky 2026-06-17 6.5 MEDIUM 6.3 MEDIUM
A vulnerability was found in HadSky up to 7.11.8. It has been declared as critical. This vulnerability affects unknown code of the file /install/index.php of the component Installation Interface. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-224242 is the identifier assigned to this vulnerability.
CVE-2023-1684 1 Hadsky 1 Hadsky 2026-06-17 5.8 MEDIUM 4.7 MEDIUM
A vulnerability was found in HadSky 7.7.16. It has been classified as problematic. This affects an unknown part of the file upload/index.php?c=app&a=superadmin:index. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224241 was assigned to this vulnerability.
CVE-2023-1683 1 Xunruicms 1 Xunruicms 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A vulnerability was found in Xunrui CMS 4.61 and classified as problematic. Affected by this issue is some unknown functionality of the file /dayrui/Fcms/View/system_log.html. The manipulation leads to information disclosure. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224240.
CVE-2023-1682 1 Xunruicms 1 Xunruicms 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A vulnerability has been found in Xunrui CMS 4.61 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /dayrui/My/Config/Install.txt. The manipulation leads to direct request. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-224239.
CVE-2023-1681 1 Xunruicms 1 Xunruicms 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A vulnerability, which was classified as problematic, was found in Xunrui CMS 4.61. Affected is an unknown function of the file /config/myfield/test.php. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224238 is the identifier assigned to this vulnerability.
CVE-2023-1680 1 Xunruicms 1 Xunruicms 2026-06-17 4.0 MEDIUM 4.3 MEDIUM
A vulnerability, which was classified as problematic, has been found in Xunrui CMS 4.61. This issue affects some unknown processing of the file /dayrui/My/View/main.html. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-224237 was assigned to this vulnerability.