Total
419407 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-41637 | 1 Grupposcai | 1 Realgimm | 2026-06-17 | N/A | 9.8 CRITICAL |
| An arbitrary file upload vulnerability in the Carica immagine function of GruppoSCAI RealGimm 1.1.37p38 allows attackers to execute arbitrary code via uploading a crafted HTML file. | |||||
| CVE-2023-41636 | 1 Grupposcai | 1 Realgimm | 2026-06-17 | N/A | 9.8 CRITICAL |
| A SQL injection vulnerability in the Data Richiesta dal parameter of GruppoSCAI RealGimm v1.1.37p38 allows attackers to access the database and execute arbitrary commands via a crafted SQL query. | |||||
| CVE-2023-41635 | 1 Grupposcai | 1 Realgimm | 2026-06-17 | N/A | 6.5 MEDIUM |
| A XML External Entity (XXE) vulnerability in the VerifichePeriodiche.aspx component of GruppoSCAI RealGimm v1.1.37p38 allows attackers to read any file in the filesystem via supplying a crafted XML file. | |||||
| CVE-2023-41633 | 1 Fossies | 1 Catdoc | 2026-06-17 | N/A | 5.5 MEDIUM |
| Catdoc v0.95 was discovered to contain a NULL pointer dereference via the component xls2csv at src/fileutil.c. | |||||
| CVE-2023-41631 | 1 Esst | 1 Esst Monitoring | 2026-06-17 | N/A | 8.8 HIGH |
| eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload function. | |||||
| CVE-2023-41630 | 1 Esst | 1 Esst Monitoring | 2026-06-17 | N/A | 9.8 CRITICAL |
| eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component. | |||||
| CVE-2023-41629 | 1 Esst | 1 Esst Monitoring | 2026-06-17 | N/A | 7.5 HIGH |
| A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal. | |||||
| CVE-2023-41628 | 1 O-ran-sc | 1 E2 | 2026-06-17 | N/A | 7.5 HIGH |
| An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components. | |||||
| CVE-2023-41627 | 1 O-ran-sc | 1 Ric Message Router | 2026-06-17 | N/A | 7.5 HIGH |
| O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device. | |||||
| CVE-2023-41626 | 1 Gradio Project | 1 Gradio | 2026-06-17 | N/A | 4.8 MEDIUM |
| Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface. | |||||
| CVE-2023-41623 | 1 Emlog | 1 Emlog | 2026-06-17 | N/A | 7.2 HIGH |
| Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php. | |||||
| CVE-2023-41621 | 1 Emlog | 1 Emlog | 2026-06-17 | N/A | 6.1 MEDIUM |
| A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php. | |||||
| CVE-2023-41619 | 1 Emlog | 1 Emlog | 2026-06-17 | N/A | 6.1 MEDIUM |
| Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write. | |||||
| CVE-2023-41618 | 1 Emlog | 1 Emlog | 2026-06-17 | N/A | 6.1 MEDIUM |
| Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?active_savedraft. | |||||
| CVE-2023-41616 | 1 Student Management System Project | 1 Student Management System | 2026-06-17 | N/A | 4.8 MEDIUM |
| A reflected cross-site scripting (XSS) vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute arbitrary Javascript in the context of a victim user's browser via a crafted payload. | |||||
| CVE-2023-41615 | 1 Phpgurukul | 1 Zoo Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. | |||||
| CVE-2023-41614 | 1 Phpgurukul | 1 Zoo Management System | 2026-06-17 | N/A | 4.8 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description of Animal parameter. | |||||
| CVE-2023-41613 | 2 Ezviz, Microsoft | 2 Ezviz Studio, Windows | 2026-06-17 | N/A | 7.8 HIGH |
| EzViz Studio v2.2.0 is vulnerable to DLL hijacking. | |||||
| CVE-2023-41612 | 1 Govicture | 2 Pc420, Pc420 Firmware | 2026-06-17 | N/A | 8.8 HIGH |
| Victure PC420 1.1.39 was discovered to use a weak encryption key for the file enabled_telnet.dat on the Micro SD card. | |||||
| CVE-2023-41611 | 1 Govicture | 2 Pc420, Pc420 Firmware | 2026-06-17 | N/A | 6.5 MEDIUM |
| Victure PC420 1.1.39 was discovered to use a weak and partially hardcoded key to encrypt data. | |||||