The archive.

CVE-2023-33675 · mitre

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the get_parentControl_list_Info function.

CVE-2023-33670 · mitre

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the time parameter in the sub_4a79ec function.

CVE-2023-33673 · mitre

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the firewallEn parameter in the formSetFirewallCfg function.

CVE-2023-33671 · mitre

Tenda AC8V4.0-V16.03.34.06 was discovered to contain a stack overflow via the deviceId parameter in the saveParentControlInfo function.

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-3068 · Campcodes Retro Cellphone Online Store

Campcodes Retro Cellphone Online Store modal_add_product.php sql injection

EPSS 0.8%public exploit CVSS 9.8

ningzichun2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2023-3008 · ningzichun Student Management System

ningzichun Student Management System login.php sql injection

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-3007 · ningzichun Student Management System

ningzichun Student Management System Password Reset resetPassword.php password recovery

nilsteampassnet1 vulnerability on this pageMax CVSS 9.0Priority 49KEV 0

CVE-2023-3086 · nilsteampassnet nilsteampassnet/teampass

Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

EPSS 0.9%public exploit CVSS 9.0

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-35744 · Microsoft Windows 10 Version 1809

Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

dataease1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-33963 · dataease dataease

DataEase data source has deserialization vulnerability

Dell1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-25539 · Dell NetWorker NVE

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client.

symantec1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-23952 · symantec

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability.

txthinking1 vulnerability on this pageMax CVSS 9.7Priority 44KEV 0

CVE-2023-33965 · txthinking brook

Brook's tproxy server is vulnerable to a drive-by command injection.

EPSS 2%CVSS 9.7

sandeepsoni2141 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-2781 · sandeepsoni214 User Email Verification for WooCommerce

User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass

VulDB2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-3056 · VulDB

YFCMF index.php path traversal

CVE-2023-3057 · VulDB

YFCMF Ajax.php path traversal

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-3061 · code-projects Agro-School Management System

code-projects Agro-School Management System Attachment Image btn_functions.php unrestricted upload

CVE-2023-3062 · code-projects Agro-School Management System

code-projects Agro-School Management System index.php sql injection

CVE-2023-3094 · code-projects Agro-School Management System

code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection

EPSS 0.7%CVSS 9.8

Hitron Technologies Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-30604 · Hitron Technologies Inc. Hitron CODA-5310

Hitron Technologies Inc. CODA-5310 - Broken Access Control

CVE-2023-30603 · Hitron Technologies Inc. Hitron CODA-5310

Hitron Technologies Inc. CODA-5310 - Using default credentials

ASUSTOR1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-2909 · ASUSTOR ADM

A Directory traversal vulnerability was found on EZ Sync service of ADM

EPSS 0.7%CVSS 10.0

ELITE1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-28701 · ELITE Web Fax

ELITE Web Fax - SQL Injection

Erikoglu Technology1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-3000 · Erikoglu Technology ErMon

SQLi in Erikoglu Technology's ErMon

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-3003 · SourceCodester Train Station Ticketing System

SourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection

CVE-2023-3004 · SourceCodester Simple Chat System

SourceCodester Simple Chat System POST Parameter sql injection

CVE-2023-3059 · SourceCodester Online Exam Form Submission

SourceCodester Online Exam Form Submission update_s6.php sql injection

EPSS 0.7%CVSS 9.8

Sprecher Automation1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2022-4333 · Sprecher Automation SPRECON-E CPU PU243x

Sprecher: Sprecon maintenance access with hardcoded credentials

SUSE1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2023-22647 · SUSE Rancher

An Improper Privilege Management vulnerability in SUSE Rancher allowed standard users to leverage their existing permissions to manipulat…

EPSS 0.7%CVSS 9.9

WADE DIGITAL DESIGN CO, LTD.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-28698 · WADE DIGITAL DESIGN CO, LTD. FANTSY

WADE DIGITAL DESIGN CO, LTD. FANTSY - Broken Acesss Control

denoland1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-33966 · denoland deno

Deno missing "--allow-net" permission check for built-in Node modules

megaease1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-33967 · megaease easeprobe

EaseProbe vulnerable to SQL injection when using MySQL/PostgreSQL data checking

EPSS 0.7%CVSS 9.8

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-34218 · JetBrains TeamCity

In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible

tsolucio1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-3069 · tsolucio tsolucio/corebos

Unverified Password Change in tsolucio/corebos

yiwent1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-3015 · yiwent Vip Video Analysis

yiwent Vip Video Analysis title.php server-side request forgery