Total
420843 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-37705 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the page parameter in the fromAddressNat function. | |||||
| CVE-2023-37704 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetClientState function. | |||||
| CVE-2023-37703 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan function. | |||||
| CVE-2023-37702 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName function. | |||||
| CVE-2023-37701 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter function. | |||||
| CVE-2023-37700 | 1 Tenda | 2 Fh1203, Fh1203 Firmware | 2026-06-17 | N/A | 9.8 CRITICAL |
| Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set function. | |||||
| CVE-2023-37692 | 1 Octobercms | 1 October | 2026-06-17 | N/A | 5.4 MEDIUM |
| An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file. | |||||
| CVE-2023-37682 | 1 Judging Management System Project | 1 Judging Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php. | |||||
| CVE-2023-37677 | 1 Pligg | 1 Pligg Cms | 2026-06-17 | N/A | 9.8 CRITICAL |
| Pligg CMS v2.0.2 (also known as Kliqqi) was discovered to contain a remote code execution (RCE) vulnerability in the component admin_editor.php. | |||||
| CVE-2023-37659 | 1 Xalpha Project | 1 Xalpha | 2026-06-17 | N/A | 9.8 CRITICAL |
| xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). | |||||
| CVE-2023-37658 | 1 Fastposter | 1 Fast-poster | 2026-06-17 | N/A | 5.4 MEDIUM |
| fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py -> ApiUploadHandler.post causes stored XSS | |||||
| CVE-2023-37657 | 1 Lm21 | 1 Twonav | 2026-06-17 | N/A | 5.4 MEDIUM |
| TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). | |||||
| CVE-2023-37656 | 1 Websiteguide Project | 1 Websiteguide | 2026-06-17 | N/A | 9.8 CRITICAL |
| WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload. | |||||
| CVE-2023-37650 | 1 Agentejo | 1 Cockpit | 2026-06-17 | N/A | 8.8 HIGH |
| A Cross-Site Request Forgery (CSRF) in the Admin portal of Cockpit CMS v2.5.2 allows attackers to execute arbitrary Administrator commands. | |||||
| CVE-2023-37649 | 1 Agentejo | 1 Cockpit | 2026-06-17 | N/A | 7.5 HIGH |
| Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data. | |||||
| CVE-2023-37645 | 1 Eyoucms | 1 Eyoucms | 2026-06-17 | N/A | 5.3 MEDIUM |
| eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt. | |||||
| CVE-2023-37644 | 1 Swftools | 1 Swftools | 2026-06-17 | N/A | 5.5 MEDIUM |
| SWFTools 0.9.2 772e55a allows attackers to trigger a large memory-allocation attempt via a crafted document, as demonstrated by pdf2swf. This occurs in png_read_chunk in lib/png.c. | |||||
| CVE-2023-37636 | 1 Webkul | 1 Uvdesk | 2026-06-17 | N/A | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in UVDesk Community Skeleton v1.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Message field when creating a ticket. | |||||
| CVE-2023-37635 | 1 Uvdesk | 1 Community-skeleton | 2026-06-17 | N/A | 9.8 CRITICAL |
| UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application. | |||||
| CVE-2023-37630 | 1 Simple Online Piggery Management System Project | 1 Simple Online Piggery Management System | 2026-06-17 | N/A | 6.1 MEDIUM |
| Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS. | |||||