Total
421074 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-34940 | 1 Asus | 2 Rt-n10lx, Rt-n10lx Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| Asus RT-N10LX Router v2.0.0.39 was discovered to contain a stack overflow via the url parameter at /start-apply.html. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. | |||||
| CVE-2023-34939 | 1 Onlyoffice | 1 Onlyoffice | 2026-06-17 | N/A | 9.8 CRITICAL |
| Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the component UploadProgress.ashx. | |||||
| CVE-2023-34937 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34936 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34935 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34934 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34933 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34932 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34931 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34930 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34929 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34928 | 1 H3c | 2 Magic B1st, Magic B1st Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34927 | 1 Casbin | 1 Casdoor | 2026-06-17 | N/A | 6.5 MEDIUM |
| Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. This vulnerability allows attackers to arbitrarily change the victim user's password via supplying a crafted URL. | |||||
| CVE-2023-34924 | 1 H3c | 2 Magic B1stw, Magic B1stw Firmware | 2026-06-17 | N/A | 7.5 HIGH |
| H3C Magic B1STW B1STV100R012 was discovered to contain a stack overflow via the function SetAPInfoById. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request. | |||||
| CVE-2023-34923 | 1 Topdesk | 1 Topdesk | 2026-06-17 | N/A | 8.1 HIGH |
| XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation. | |||||
| CVE-2023-34917 | 1 Cms Project | 1 Cms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Fuge CMS v1.0 contains an Open Redirect vulnerability in member/RegisterAct.java. | |||||
| CVE-2023-34916 | 1 Cms Project | 1 Cms | 2026-06-17 | N/A | 6.1 MEDIUM |
| Fuge CMS v1.0 contains an Open Redirect vulnerability via /front/ProcessAct.java. | |||||
| CVE-2023-34880 | 1 Cmseasy | 1 Cmseasy | 2026-06-17 | N/A | 9.8 CRITICAL |
| cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admin/language_admin.php. This vulnerability allows attackers to execute arbitrary code and perform a local file inclusion. | |||||
| CVE-2023-34878 | 1 Ujcms | 1 Ujcms | 2026-06-17 | N/A | 7.5 HIGH |
| An issue was discovered in Ujcms v6.0.2 allows attackers to gain sensitive information via the dir parameter to /api/backend/core/web-file-html/download-zip. | |||||
| CVE-2023-34873 | 2026-06-17 | N/A | N/A | ||
| On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute code. | |||||