Vulnerabilities (CVE)

Total 421074 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34609 1 Flexjson Project 1 Flexjson 2026-06-17 N/A 7.5 HIGH
An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVE-2023-34603 1 Jeecg 1 Jeecgboot 2026-06-17 N/A 7.5 HIGH
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.
CVE-2023-34602 1 Jeecg 1 Jeecgboot 2026-06-17 N/A 7.5 HIGH
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController.
CVE-2023-34601 1 Jeesite 1 Jeesite 2026-06-17 N/A 9.8 CRITICAL
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component ${businessTable} at /act/ActDao.xml.
CVE-2023-34600 1 Adiscon 1 Loganalyzer 2026-06-17 N/A 9.8 CRITICAL
Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.
CVE-2023-34599 1 Gibbonedu 1 Gibbon 2026-06-17 N/A 6.1 MEDIUM
Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibbon v25.0.0, which enable attackers to execute arbitrary Javascript code.
CVE-2023-34598 1 Gibbonedu 1 Gibbon 2026-06-17 N/A 9.8 CRITICAL
Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the installation folder in the server's response.
CVE-2023-34597 1 Fibaro 2 Fgms-001, Fgms-001 Firmware 2026-06-17 N/A 6.5 MEDIUM
A vulnerability in Fibaro Motion Sensor firmware v3.4 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message.
CVE-2023-34596 1 Aeotech 2 Zw130-a, Zw130-a Firmware 2026-06-17 N/A 6.5 MEDIUM
A vulnerability in Aeotec WallMote Switch firmware v2.3 allows attackers to cause a Denial of Service (DoS) via a crafted Z-Wave message.
CVE-2023-34581 1 Oretnom23 1 Service Provider Management System 2026-06-17 N/A 9.8 CRITICAL
Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2
CVE-2023-34577 1 Planned Popup Project 1 Planned Popup 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook() method.
CVE-2023-34576 1 Store-opart 1 Op\'art Product Faq 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector.
CVE-2023-34575 1 Store-opart 1 Op\'art Save Cart 2026-06-17 N/A 9.8 CRITICAL
SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods.
CVE-2023-34571 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter shareSpeed at /goform/WifiGuestSet.
CVE-2023-34570 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName.
CVE-2023-34569 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetNetControlList.
CVE-2023-34568 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.
CVE-2023-34567 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 6.7 MEDIUM
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.
CVE-2023-34566 1 Tenda 2 Ac10, Ac10 Firmware 2026-06-17 N/A 9.8 CRITICAL
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo.
CVE-2023-34565 1 Netbox 1 Netbox 2026-06-17 N/A 5.4 MEDIUM
Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function.