CVE Vulnerability Database
Search and browse 394,730 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
28,816 records from 2023Clear filters
- CVE-2023-23442High 7.1Dec 29, 2023Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
- CVE-2023-23441Medium 5.5Dec 29, 2023Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
- CVE-2023-7148High 8.1Dec 29, 2023A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/main/java/ml/shifu/shifu/core/DataPurifier.java of the component Java Expression Language Handler. The manipulation of the argument FilterExpression leads to code injection. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249151.
- CVE-2023-7147Critical 9.8Dec 29, 2023A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl/User.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. VDB-249150 is the identifier assigned to this vulnerability.
- CVE-2023-31294High 7.5Dec 29, 2023CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.
- CVE-2023-31293Medium 4.3Dec 29, 2023An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.
- CVE-2023-23440Medium 5.5Dec 29, 2023Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- CVE-2023-23439Medium 5.5Dec 29, 2023Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- CVE-2023-23438Medium 5.5Dec 29, 2023Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions
- CVE-2023-23437Medium 5.5Dec 29, 2023Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak
- CVE-2023-23430High 7.5Dec 29, 2023Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- CVE-2023-23429High 7.5Dec 29, 2023Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- CVE-2023-23428High 7.5Dec 29, 2023Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- CVE-2023-23427High 7.5Dec 29, 2023Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
- CVE-2023-23426Medium 5.5Dec 29, 2023Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure.
- CVE-2023-23424Critical 9.8Dec 29, 2023Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution
- CVE-2023-7146Critical 9.8Dec 29, 2023A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file app/ctrl/framework/Feature.php of the component HTTP POST Request Handler. The manipulation of the argument phone leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249149 was assigned to this vulnerability.
- CVE-2023-7145Critical 9.8Dec 29, 2023A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Framework.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249148.
- CVE-2023-31301Medium 6.1Dec 29, 2023Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the Username field of the login form and application log.
- CVE-2023-31298Medium 4.8Dec 29, 2023Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code and obtain sensitive information via the User ID field when creating a new system user.
- CVE-2023-31292Medium 5.5Dec 29, 2023An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass authentication via "Back Button Refresh" attack.
- CVE-2023-23436High 7.1Dec 29, 2023Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file
- CVE-2023-23435High 7.1Dec 29, 2023Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file
- CVE-2023-23434Medium 5.5Dec 29, 2023Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.
- CVE-2023-23433High 7.1Dec 29, 2023Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.