Total
418306 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-43371 | 1 Digitaldruid | 1 Hoteldruid | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php. | |||||
| CVE-2023-43364 | 1 Arjunsharda | 1 Searchor | 2026-06-17 | N/A | 9.8 CRITICAL |
| main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution. | |||||
| CVE-2023-43361 | 1 Xiph | 1 Vorbis-tools | 2026-06-17 | N/A | 7.8 HIGH |
| Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. | |||||
| CVE-2023-43360 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component. | |||||
| CVE-2023-43359 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data parameters in the Content Manager Menu component. | |||||
| CVE-2023-43358 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component. | |||||
| CVE-2023-43357 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component. | |||||
| CVE-2023-43356 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Global Meatadata parameter in the Global Settings Menu component. | |||||
| CVE-2023-43355 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component. | |||||
| CVE-2023-43354 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component. | |||||
| CVE-2023-43353 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component. | |||||
| CVE-2023-43352 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 7.8 HIGH |
| An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Content Manager Menu component. | |||||
| CVE-2023-43346 | 1 Opensolution | 1 Quick Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component. | |||||
| CVE-2023-43345 | 1 Opensolution | 1 Quick Cms | 2026-06-17 | N/A | 8.6 HIGH |
| Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component. | |||||
| CVE-2023-43344 | 1 Opensolution | 1 Quick Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component. | |||||
| CVE-2023-43343 | 1 Opensolution | 1 Quick Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component. | |||||
| CVE-2023-43342 | 1 Opensolution | 1 Quick Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component. | |||||
| CVE-2023-43341 | 1 Evo | 1 Evolution Cms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter. | |||||
| CVE-2023-43340 | 1 Evo | 1 Evolution Cms | 2026-06-17 | N/A | 5.2 MEDIUM |
| Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters | |||||
| CVE-2023-43339 | 1 Cmsmadesimple | 1 Cms Made Simple | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User or Database Port components. | |||||