Export limit exceeded: 362407 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (362407 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-37148 | 1 Totolink | 2 Lr350, Lr350 Firmware | 2024-11-21 | 9.8 Critical |
| TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd parameter in the setUssd function. | ||||
| CVE-2023-37146 | 1 Totolink | 2 Lr350, Lr350 Firmware | 2024-11-21 | 9.8 Critical |
| TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function. | ||||
| CVE-2023-37145 | 1 Totolink | 2 Lr350, Lr350 Firmware | 2024-11-21 | 9.8 Critical |
| TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function. | ||||
| CVE-2023-37144 | 2 Tenda, Tendacn | 2 Ac10, Ac10 Firmware | 2024-11-21 | 9.8 Critical |
| Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the function formWriteFacMac. | ||||
| CVE-2023-37143 | 1 Microsoft | 1 Chakracore | 2024-11-21 | 5.5 Medium |
| ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp(). | ||||
| CVE-2023-37142 | 1 Microsoft | 1 Chakracore | 2024-11-21 | 5.5 Medium |
| ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees(). | ||||
| CVE-2023-37141 | 1 Microsoft | 1 Chakracore | 2024-11-21 | 5.5 Medium |
| ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray(). | ||||
| CVE-2023-37140 | 1 Microsoft | 1 Chakracore | 2024-11-21 | 5.5 Medium |
| ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount(). | ||||
| CVE-2023-37139 | 1 Microsoft | 1 Chakracore | 2024-11-21 | 5.5 Medium |
| ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray(). | ||||
| CVE-2023-37136 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Basic Website Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37135 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Image Upload module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37134 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Basic Information module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37133 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Column management module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37132 | 1 Eyoucms | 1 Eyoucms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the custom variables module of eyoucms v1.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37131 | 1 Yzncms | 1 Yzncms | 2024-11-21 | 6.5 Medium |
| A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of YznCMS v1.1.0 allows attackers to arbitrarily change the Administrator password via a crafted POST request. | ||||
| CVE-2023-37125 | 1 Seacms | 1 Seacms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37124 | 1 Seacms | 1 Seacms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||||
| CVE-2023-37122 | 1 Bagesoft | 1 Bagecms | 2024-11-21 | 5.4 Medium |
| A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Custom Settings module. | ||||
| CVE-2023-37117 | 1 Live555 | 1 Live555 | 2024-11-21 | 9.8 Critical |
| A heap-use-after-free vulnerability was found in live555 version 2023.05.10 while handling the SETUP. | ||||
| CVE-2023-37070 | 1 Code-projects | 1 Hospital Information System | 2024-11-21 | 4.8 Medium |
| Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting (XSS) | ||||