Total
420933 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-37122 | 1 Bagesoft | 1 Bagecms | 2026-06-17 | N/A | 5.4 MEDIUM |
| A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module. | |||||
| CVE-2023-37117 | 1 Live555 | 1 Live555 | 2026-06-17 | N/A | 9.8 CRITICAL |
| A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. | |||||
| CVE-2023-37070 | 1 Code-projects | 1 Hospital Information System | 2026-06-17 | N/A | 4.8 MEDIUM |
| Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) | |||||
| CVE-2023-37069 | 1 Online Hospital Management System Project | 1 Online Hospital Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Code-Projects Online Hospital Management System V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL queries executed by the application. The application fails to properly validate user-supplied input in the login id and password fields during the login process, enabling an attacker to inject malicious SQL code. | |||||
| CVE-2023-37068 | 1 Sherlock | 1 Gym Management System | 2026-06-17 | N/A | 9.8 CRITICAL |
| Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthorized access and potential data manipulation. This vulnerability arises due to insufficient validation of user-supplied input in the username and password fields, enabling SQL Injection attacks. | |||||
| CVE-2023-37067 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section. | |||||
| CVE-2023-37066 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel. | |||||
| CVE-2023-37065 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section. | |||||
| CVE-2023-37064 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section. | |||||
| CVE-2023-37063 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section. | |||||
| CVE-2023-37062 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition. | |||||
| CVE-2023-37061 | 1 Chamilo | 1 Chamilo | 2026-06-17 | N/A | 4.8 MEDIUM |
| Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section. | |||||
| CVE-2023-37049 | 1 Emlog | 1 Emlog | 2026-06-17 | N/A | 6.5 MEDIUM |
| emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php. | |||||
| CVE-2023-37039 | 2026-06-17 | N/A | 6.5 MEDIUM | ||
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC Establishment Clause` field. | |||||
| CVE-2023-37038 | 1 Linuxfoundation | 1 Magma | 2026-06-17 | N/A | 6.5 MEDIUM |
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `MME_UE_S1AP_ID` field. | |||||
| CVE-2023-37037 | 1 Linuxfoundation | 1 Magma | 2026-06-17 | N/A | 6.5 MEDIUM |
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported TAs` field. | |||||
| CVE-2023-37036 | 1 Linuxfoundation | 1 Magma | 2026-06-17 | N/A | 6.5 MEDIUM |
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `ENB_UE_S1AP_ID` field. | |||||
| CVE-2023-37035 | 2026-06-17 | N/A | 6.5 MEDIUM | ||
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global eNB ID` field. | |||||
| CVE-2023-37034 | 1 Linuxfoundation | 1 Magma | 2026-06-17 | N/A | 6.5 MEDIUM |
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field. | |||||
| CVE-2023-37033 | 1 Linuxfoundation | 1 Magma | 2026-06-17 | N/A | 6.5 MEDIUM |
| A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `EUTRAN_CGI` field. | |||||