Total
420475 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-39110 | 1 Rconfig | 1 Rconfig | 2026-06-17 | N/A | 8.8 HIGH |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path parameter at /ajaxGetFileByPath.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | |||||
| CVE-2023-39109 | 1 Rconfig | 1 Rconfig | 2026-06-17 | N/A | 8.8 HIGH |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_a parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | |||||
| CVE-2023-39108 | 1 Rconfig | 1 Rconfig | 2026-06-17 | N/A | 8.8 HIGH |
| rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the path_b parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs. | |||||
| CVE-2023-39107 | 2 Apple, Nomachine | 2 Macos, Nomachine | 2026-06-17 | N/A | 9.1 CRITICAL |
| An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks. | |||||
| CVE-2023-39106 | 1 Alibabacloud | 1 Nacos Spring Project | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in Nacos Group Nacos Spring Project v.1.1.1 and before allows a remote attacker to execute arbitrary code via the SnakeYamls Constructor() component. | |||||
| CVE-2023-39097 | 1 Webboss | 1 Webboss.io Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| WebBoss.io CMS v3.7.0.1 contains a stored cross-site scripting (XSS) vulnerability. | |||||
| CVE-2023-39096 | 1 Webboss | 1 Webboss.io Cms | 2026-06-17 | N/A | 5.4 MEDIUM |
| WebBoss.io CMS v3.7.0.1 contains a stored Cross-Site Scripting (XSS) vulnerability due to lack of input validation and output encoding. | |||||
| CVE-2023-39094 | 1 Zerowdd | 1 Studentmanager | 2026-06-17 | N/A | 5.4 MEDIUM |
| Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function. | |||||
| CVE-2023-39076 | 1 Gm | 2 Chevrolet Equinox, Mylink Infotainment System | 2026-06-17 | N/A | 4.6 MEDIUM |
| Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of Service (DoS) in the in-car infotainment system. | |||||
| CVE-2023-39075 | 1 Renault | 2 Zoe Ev 2021, Zoe Ev 2021 Firmware | 2026-06-17 | N/A | 4.6 MEDIUM |
| Renault Zoe EV 2021 automotive infotainment system versions 283C35202R to 283C35519R (builds 11.10.2021 to 16.01.2023) allows attackers to crash the infotainment system by sending arbitrary USB data via a USB device. | |||||
| CVE-2023-39073 | 1 Voltronicpower | 1 Snmp Web Pro | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in SNMP Web Pro v.1.1 allows a remote attacker to execute arbitrary code and obtain senstive information via a crafted request. | |||||
| CVE-2023-39070 | 1 Cppchecksolutions | 1 Cppcheck | 2026-06-17 | N/A | 7.8 HIGH |
| An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. | |||||
| CVE-2023-39069 | 1 Strangebee | 2 Cortex, Thehive | 2026-06-17 | N/A | 9.8 CRITICAL |
| An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism. | |||||
| CVE-2023-39068 | 1 Xiongmaitech | 4 Nb080s09s-klc, Nb080s09s-klc Firmware, Nbd80n32ra-kl-v3 and 1 more | 2026-06-17 | N/A | 7.5 HIGH |
| Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.03.R11.7601.Nat.OnvifC.20220120.bin allows a remote attacker to casue a denial of service via a crafted request to the service.XM component. | |||||
| CVE-2023-39067 | 1 Zlmediakit | 1 Zlmediakit | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL. | |||||
| CVE-2023-39063 | 1 Raidenftpd | 1 Raidenftpd | 2026-06-17 | N/A | 7.8 HIGH |
| Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wizard. | |||||
| CVE-2023-39062 | 1 Html2pdf Project | 1 Html2pdf | 2026-06-17 | N/A | 6.1 MEDIUM |
| Cross Site Scripting vulnerability in Spipu HTML2PDF before v.5.2.8 allows a remote attacker to execute arbitrary code via a crafted script to the forms.php. | |||||
| CVE-2023-39059 | 1 Ansible-semaphore | 1 Ansible Semaphore | 2026-06-17 | N/A | 8.8 HIGH |
| An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter. | |||||
| CVE-2023-39057 | 1 Lycorp | 1 Line Mini App | 2026-06-17 | N/A | 7.5 HIGH |
| An information leak in hirochanKAKIwaiting v13.6.1 allows attackers to obtain the channel access token and send crafted messages. | |||||
| CVE-2023-39054 | 1 Lycorp | 1 Line Mini App | 2026-06-17 | N/A | 7.5 HIGH |
| An information leak in Tokudaya.ekimae_mc v13.6.1 allows attackers to obtain the channel access token and send crafted messages. | |||||