Total
419407 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-41527 | 1 Kishan0725 | 1 Hospital Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php. | |||||
| CVE-2023-41526 | 1 Kishan0725 | 1 Hospital Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters. | |||||
| CVE-2023-41525 | 1 Kishan0725 | 1 Hospital Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php. | |||||
| CVE-2023-41524 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php. | |||||
| CVE-2023-41523 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php. | |||||
| CVE-2023-41522 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters. | |||||
| CVE-2023-41521 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters. | |||||
| CVE-2023-41520 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 8.8 HIGH |
| Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters. | |||||
| CVE-2023-41519 | 1 Student Attendance Management System Project | 1 Student Attendance Management System | 2026-06-17 | N/A | 6.1 MEDIUM |
| Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the sessionName parameter at createSessionTerm.php. | |||||
| CVE-2023-41508 | 1 Superstorefinder | 1 Super Store Finder | 2026-06-17 | N/A | 9.8 CRITICAL |
| A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel. | |||||
| CVE-2023-41507 | 1 Superstorefinder | 1 Super Store Finder | 2026-06-17 | N/A | 9.8 CRITICAL |
| Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters. | |||||
| CVE-2023-41506 | 1 Code-projects | 1 Student Enrollment | 2026-06-17 | N/A | 9.8 CRITICAL |
| An arbitrary file upload vulnerability in the Update/Edit Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | |||||
| CVE-2023-41505 | 1 Code-projects | 1 Student Enrollment | 2026-06-17 | N/A | 9.8 CRITICAL |
| An arbitrary file upload vulnerability in the Add Student's Profile Picture function of Student Enrollment In PHP v1.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | |||||
| CVE-2023-41504 | 1 Code-projects | 1 Student Enrollment | 2026-06-17 | N/A | 8.8 HIGH |
| SQL Injection vulnerability in Student Enrollment In PHP 1.0 allows attackers to run arbitrary code via the Student Search function. | |||||
| CVE-2023-41503 | 1 Code-projects | 1 Student Enrollment | 2026-06-17 | N/A | 9.8 CRITICAL |
| Student Enrollment In PHP v1.0 was discovered to contain a SQL injection vulnerability via the Login function. | |||||
| CVE-2023-41484 | 1 Cimg | 1 Cimg | 2026-06-17 | N/A | 8.1 HIGH |
| An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file. | |||||
| CVE-2023-41474 | 1 Ivanti | 1 Avalanche | 2026-06-17 | N/A | 6.5 MEDIUM |
| Directory Traversal vulnerability in Ivanti Avalanche 6.3.4.153 allows a remote authenticated attacker to obtain sensitive information via the javax.faces.resource component. | |||||
| CVE-2023-41471 | 1 9001 | 1 Copyparty | 2026-06-17 | N/A | 7.8 HIGH |
| Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write access to the server, and they can more simply upload HTML files containing JavaScript. | |||||
| CVE-2023-41444 | 2 Binalyze, Microsoft | 2 Irec, Windows | 2026-06-17 | N/A | 7.8 HIGH |
| An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in IREC.sys driver. | |||||
| CVE-2023-41443 | 1 Xxyopen | 1 Novel-plus | 2026-06-17 | N/A | 7.2 HIGH |
| SQL injection vulnerability in Novel-Plus v.4.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the sort parameter in /sys/menu/list. | |||||