Total
417647 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-45911 | 1 Wipotec | 1 Comscale | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password. | |||||
| CVE-2023-45909 | 1 Zzzcms | 1 Zzzphp | 2026-06-17 | N/A | 6.1 MEDIUM |
| zzzcms v2.2.0 was discovered to contain an open redirect vulnerability. | |||||
| CVE-2023-45908 | 2026-06-17 | N/A | 6.1 MEDIUM | ||
| Homarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notebook widget. | |||||
| CVE-2023-45907 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/delete. | |||||
| CVE-2023-45906 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/user/add. | |||||
| CVE-2023-45905 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/variable/add. | |||||
| CVE-2023-45904 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /variable/update. | |||||
| CVE-2023-45903 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/label/delete. | |||||
| CVE-2023-45902 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/attachment/delete. | |||||
| CVE-2023-45901 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 8.8 HIGH |
| Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin\/category\/add. | |||||
| CVE-2023-45899 | 1 Idnovate | 1 Superuser | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in the component SuperUserSetuserModuleFrontController:init() of idnovate superuser before v2.4.2 allows attackers to bypass authentication via a crafted HTTP call. | |||||
| CVE-2023-45897 | 1 Namjaejeon | 1 Exfatprogs | 2026-06-17 | N/A | 5.5 MEDIUM |
| exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. | |||||
| CVE-2023-45896 | 2026-06-17 | N/A | 7.1 HIGH | ||
| ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is configured to allow unprivileged mounts of removable media) and then leveraging local access to trigger an out-of-bounds read. A length value can be larger than the amount of memory allocated. NOTE: the supplier's perspective is that there is no vulnerability when an attack requires an attacker-modified filesystem image. | |||||
| CVE-2023-45894 | 1 Parallels | 1 Remote Application Server | 2026-06-17 | N/A | 10.0 CRITICAL |
| The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout techniques. | |||||
| CVE-2023-45893 | 1 Floorsightsoftware | 1 Customer Portal | 2026-06-17 | N/A | 7.5 HIGH |
| An indirect Object Reference (IDOR) in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information. | |||||
| CVE-2023-45892 | 1 Floorsightsoftware | 1 Insight | 2026-06-17 | N/A | 7.5 HIGH |
| An issue discovered in the Order and Invoice pages in Floorsight Insights Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information. | |||||
| CVE-2023-45889 | 1 Classlink | 1 Oneclick | 2026-06-17 | N/A | 6.1 MEDIUM |
| A Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.8 allows remote attackers to inject JavaScript into any webpage. NOTE: this issue exists because of an incomplete fix for CVE-2022-48612. | |||||
| CVE-2023-45887 | 1 Nintendo | 1 Ds Wireless Communication | 2026-06-17 | N/A | 9.8 CRITICAL |
| DS Wireless Communication (DWC) with DWC_VERSION_3 and DWC_VERSION_11 allows remote attackers to execute arbitrary code on a game-playing client's machine via a modified GPCM message. | |||||
| CVE-2023-45886 | 2 F5, Ipinfusion | 6 Big-ip Global Traffic Manager, Big-ip Local Traffic Manager, Big-ip Next and 3 more | 2026-06-17 | N/A | 7.5 HIGH |
| The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute. | |||||
| CVE-2023-45885 | 1 Nasa | 1 Openmct | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in NASA Open MCT (aka openmct) through 3.1.0 allows attackers to run arbitrary code via the new component feature in the flexibleLayout plugin. | |||||