CVE-2023-38954

CriticalCVSS 9.8/10Last modified Jul 9, 2026

Related CVEs from 2023

CVE-2023-389557.5ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP aCVE-2023-389567.5A path traversal vulnerability in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to read arbitrary files via supplying a craftCVE-2023-389585.3An access control issue in ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to arbitrarily close and open the doors managed by tCVE-2023-38967.8Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3CVE-2023-389607.3Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute CVE-2023-389619.8Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_CVE-2023-389646.1Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting (XSS) vulnerability.CVE-2023-389659.8Lost and Found Information System 1.0 allows account takeover via username and password to a /classes/Users.php?f=save URI.CVE-2023-389695.4Cross Site Scripting vulnerabiltiy in Badaso v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload to the title pCVE-2023-38975.3Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerateCVE-2023-389705.4Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload tCVE-2023-389715.4Cross Site Scripting vulnerabiltiy in Badaso v.0.0.1 thru v.2.9.7 allows a remote attacker to execute arbitrary code via a crafted payload t
CVE-2023-38954: Critical severity, CVSS 9.8 | Vulnix