Total
418179 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-43979 | 1 Prestahero | 1 Ybc Blog | 2026-06-17 | N/A | 9.8 CRITICAL |
| ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontController::getPosts(). | |||||
| CVE-2023-43976 | 1 Catonetworks | 1 Cato Client | 2026-06-17 | N/A | 8.1 HIGH |
| An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component. | |||||
| CVE-2023-43971 | 1 Lizhipay | 1 Acg-faka | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php. | |||||
| CVE-2023-43962 | 2026-06-17 | N/A | 4.8 MEDIUM | ||
| Cross Site Scripting vulnerability in Xunrui CMS Public Edition v.4.6.1 allows a remote attacker to execute arbitrary code via the project name function in the project settings tab. | |||||
| CVE-2023-43961 | 1 Dromara | 1 Sa-token | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass. | |||||
| CVE-2023-43960 | 1 Dlink | 2 Dph-400se, Dph-400se Firmware | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component. | |||||
| CVE-2023-43959 | 1 Yealink | 2 Sip-t19p-e2, Sip-t19p-e2 Firmware | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote privileged attacker to execute arbitrary code via a crafted request the ping function of the diagnostic component. | |||||
| CVE-2023-43958 | 1 Kishan0725 | 1 Hospital Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| An arbitrary file upload vulnerability in the component /jquery-file-upload/server/php/index.php of Hospital Management System v4.0 allows an unauthenticated attacker to upload any file to the server and execute arbitrary code. | |||||
| CVE-2023-43955 | 1 Fedirtsapana | 1 Tv Bro | 2026-06-17 | N/A | 9.8 CRITICAL |
| The com.phlox.tvwebbrowser TV Bro application through 2.0.0 for Android mishandles external intents through WebView. This allows attackers to execute arbitrary code, create arbitrary files. and perform arbitrary downloads via JavaScript that uses takeBlobDownloadData. | |||||
| CVE-2023-43953 | 1 Sscms | 1 Sscms | 2026-06-17 | N/A | 5.4 MEDIUM |
| SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component. | |||||
| CVE-2023-43952 | 1 Sscms Project | 1 Sscms | 2026-06-17 | N/A | 5.4 MEDIUM |
| SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component. | |||||
| CVE-2023-43951 | 1 Sscms Project | 1 Sscms | 2026-06-17 | N/A | 5.4 MEDIUM |
| SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component. | |||||
| CVE-2023-43944 | 1 Oretnom23 | 1 Task Management System | 2026-06-17 | N/A | 5.4 MEDIUM |
| A Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via parameter field in index.php?page=project_list. | |||||
| CVE-2023-43909 | 1 Hospital Management System Project | 1 Hospital Management System | 2026-06-17 | N/A | 9.1 CRITICAL |
| Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. | |||||
| CVE-2023-43907 | 1 Optipng Project | 1 Optipng | 2026-06-17 | N/A | 7.8 HIGH |
| OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. | |||||
| CVE-2023-43906 | 1 Onworks | 1 Xolo Cms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Xolo CMS v0.11 was discovered to contain a reflected cross-site scripting (XSS) vulnerability. | |||||
| CVE-2023-43905 | 1 Writercms | 1 Writercms | 2026-06-17 | N/A | 7.5 HIGH |
| Incorrect access control in writercms v1.1.0 allows attackers to directly obtain backend account passwords via unspecified vectors. | |||||
| CVE-2023-43899 | 1 Hansuncms Project | 1 Hansuncms | 2026-06-17 | N/A | 9.8 CRITICAL |
| hansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax/ajax_login.ashx. | |||||
| CVE-2023-43898 | 1 Nothings | 1 Stb Image.h | 2026-06-17 | N/A | 5.5 MEDIUM |
| Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file. | |||||
| CVE-2023-43893 | 1 Netis-systems | 2 N3m, N3m Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function. This vulnerability is exploited via a crafted payload. | |||||