Total
419339 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-42320 | 1 Tenda | 2 Ac10, Ac10 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Buffer Overflow vulnerability in Tenda AC10V4 v.US_AC10V4.0si_V16.03.10.13_cn_TDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function. | |||||
| CVE-2023-42319 | 1 Ethereum | 1 Go Ethereum | 2026-06-17 | N/A | 7.5 HIGH |
| Geth (aka go-ethereum) through 1.13.4, when --http --graphql is used, allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a crafted GraphQL query. NOTE: the vendor's position is that the "graphql endpoint [is not] designed to withstand attacks by hostile clients, nor handle huge amounts of clients/traffic. | |||||
| CVE-2023-42308 | 1 Code-projects | 1 Exam Form Submission | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in Manage Fastrack Subjects in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via the "Subject Name" and "Subject Code" Section. | |||||
| CVE-2023-42307 | 1 Code-projects | 1 Exam Form Submission | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting (XSS) vulnerability in Code-Projects Exam Form Submission 1.0 allows attackers to run arbitrary code via "Subject Name" and "Subject Code" section. | |||||
| CVE-2023-42299 | 1 Openimageio | 1 Openimageio | 2026-06-17 | N/A | 9.8 CRITICAL |
| Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function. | |||||
| CVE-2023-42298 | 1 Gpac | 1 Gpac | 2026-06-17 | N/A | 5.5 MEDIUM |
| An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c. | |||||
| CVE-2023-42295 | 1 Openimageio | 1 Openimageio | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c | |||||
| CVE-2023-42286 | 1 Eyoucms | 1 Eyoucms | 2026-06-17 | N/A | 9.8 CRITICAL |
| There is a PHP file inclusion vulnerability in the template configuration of eyoucms v1.6.4, allowing attackers to execute code or system commands through a carefully crafted malicious payload. | |||||
| CVE-2023-42284 | 1 Tyk | 1 Tyk | 2026-06-17 | N/A | 9.8 CRITICAL |
| Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query. | |||||
| CVE-2023-42283 | 1 Tyk | 1 Tyk | 2026-06-17 | N/A | 9.8 CRITICAL |
| Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query. | |||||
| CVE-2023-42282 | 1 Fedorindutny | 1 Ip | 2026-06-17 | N/A | 9.8 CRITICAL |
| The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic. | |||||
| CVE-2023-42280 | 1 Springernature | 1 Mee-admin | 2026-06-17 | N/A | 7.5 HIGH |
| mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading. | |||||
| CVE-2023-42279 | 1 Iteachyou | 1 Dreamer Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form. | |||||
| CVE-2023-42278 | 1 Hutool | 1 Hutool | 2026-06-17 | N/A | 7.5 HIGH |
| hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). | |||||
| CVE-2023-42277 | 1 Hutool | 1 Hutool | 2026-06-17 | N/A | 9.8 CRITICAL |
| hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. | |||||
| CVE-2023-42276 | 1 Hutool | 1 Hutool | 2026-06-17 | N/A | 9.8 CRITICAL |
| hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. | |||||
| CVE-2023-42270 | 1 Grocy Project | 1 Grocy | 2026-06-17 | N/A | 8.8 HIGH |
| Grocy <= 4.0.2 is vulnerable to Cross Site Request Forgery (CSRF). | |||||
| CVE-2023-42268 | 1 Jeecg | 1 Jeecg Boot | 2026-06-17 | N/A | 9.8 CRITICAL |
| Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. | |||||
| CVE-2023-42261 | 1 Opensecurity | 1 Mobile Security Framework | 2026-06-17 | N/A | 7.5 HIGH |
| Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not implemented because the product is not intended for an untrusted network environment. Use cases requiring authentication could, for example, use a reverse proxy server. | |||||
| CVE-2023-42253 | 1 Vehicle Management Project | 1 Vehicle Management | 2026-06-17 | N/A | 6.1 MEDIUM |
| Code-Projects Vehicle Management 1.0 is vulnerable to Cross Site Scripting (XSS) in Add Accounts via Invoice No, To, and Mammul. | |||||