Browse All CVEs
9,471 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-31135 |
medium | 5.5 | 0.0015 | 2026-10-29 | Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vuln | |
CVE-2023-31101 |
medium | 6.5 | 0.0111 | 2026-10-29 | Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Ap | |
CVE-2023-28320 |
medium | 5.9 | 0.0266 | 2026-10-29 | A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides sever | |
CVE-2023-28321 |
medium | 5.9 | 0.0181 | 2026-10-29 | An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supp | |
CVE-2023-33181 |
medium | 5.3 | 0.0054 | 2026-10-29 | Xibo is a content management system (CMS). Starting in version 3.0.0 and prior to version | |
CVE-2023-0430 |
medium | 6.5 | 0.0037 | 2026-10-29 | Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail | |
CVE-2023-0547 |
medium | 6.5 | 0.0037 | 2026-10-29 | OCSP revocation status of recipient certificates was not checked when sending S/Mime encry | |
CVE-2023-0616 |
medium | 6.5 | 0.0049 | 2026-10-29 | If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeat | |
CVE-2023-1945 |
medium | 6.5 | 0.0064 | 2026-10-29 | Unexpected data returned from the Safe Browsing API could have led to memory corruption an | |
CVE-2023-23598 |
medium | 6.5 | 0.0064 | 2026-10-29 | Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all | |
CVE-2023-23599 |
medium | 6.5 | 0.0060 | 2026-10-29 | When copying a network request from the developer tools panel as a curl command the output | |
CVE-2023-23601 |
medium | 6.5 | 0.0035 | 2026-10-29 | Navigations were being allowed when dragging a URL from a cross-origin iframe into the sam | |
CVE-2023-25728 |
medium | 6.5 | 0.0067 | 2026-10-29 | The <code>Content-Security-Policy-Report-Only</code> header could allow an attacker to lea | |
CVE-2023-25730 |
medium | 5.4 | 0.0055 | 2026-10-29 | A background script invoking <code>requestFullscreen</code> and then blocking the main thr | |
CVE-2023-25738 |
medium | 6.5 | 0.0063 | 2026-10-29 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being | |
CVE-2023-25742 |
medium | 6.5 | 0.0065 | 2026-10-29 | When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly | |
CVE-2023-25751 |
medium | 6.5 | 0.0069 | 2026-10-29 | Sometimes, when invalidating JIT code while following an iterator, the newly generated cod | |
CVE-2023-25752 |
medium | 6.5 | 0.0061 | 2026-10-29 | When accessing throttled streams, the count of available bytes needed to be checked in the | |
CVE-2023-28163 |
medium | 6.5 | 0.0080 | 2026-10-29 | When downloading files through the Save As dialog on Windows with suggested filenames cont | |
CVE-2023-28164 |
medium | 6.5 | 0.0035 | 2026-10-29 | Dragging a URL from a cross-origin iframe that was removed during the drag could have led | |
CVE-2023-29535 |
medium | 6.5 | 0.0075 | 2026-10-29 | Following a Garbage Collector compaction, weak maps may have been accessed before they wer | |
CVE-2023-29548 |
medium | 6.5 | 0.0069 | 2026-10-29 | A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization re | |
CVE-2023-32206 |
medium | 6.5 | 0.0070 | 2026-10-29 | An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerabili | |
CVE-2023-32211 |
medium | 6.5 | 0.0074 | 2026-10-29 | A type checking bug would have led to invalid code being compiled. This vulnerability affe | |
CVE-2023-32212 |
medium | 4.3 | 0.0065 | 2026-10-29 | An attacker could have positioned a `datalist` element to obscure the address bar. This vu | |
CVE-2023-3055 |
medium | 4.3 | 0.0021 | 2026-10-29 | The Page Builder by AZEXO plugin for WordPress is vulnerable to Cross-Site Request Forgery | |
CVE-2023-2572 |
medium | 6.1 | 0.0046 | 2026-10-29 | The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outp | |
CVE-2023-33524 |
medium | 5.3 | 0.0095 | 2026-10-29 | Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses t | |
CVE-2023-2187 |
medium | 5.3 | 0.0059 | 2026-10-29 | On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacke | |
CVE-2023-2085 |
medium | 4.3 | 0.0061 | 2026-10-29 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionali | |
CVE-2023-27465 |
medium | 4.6 | 0.0028 | 2026-10-29 | A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SI | |
CVE-2023-29178 |
medium | 4.3 | 0.0095 | 2026-10-29 | A access of uninitialized pointer vulnerability [CWE-824] vulnerability in Fortinet FortiO | |
CVE-2023-31238 |
medium | 4.8 | 0.0043 | 2026-10-29 | A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3. | |
CVE-2023-33121 |
medium | 5.5 | 0.0018 | 2026-10-29 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visual | |
CVE-2023-33122 |
medium | 5.5 | 0.0019 | 2026-10-29 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visual | |
CVE-2023-29532 |
medium | 5.5 | 0.0019 | 2026-10-29 | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned updat | |
CVE-2023-29545 |
medium | 6.5 | 0.0058 | 2026-10-29 | Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames con | |
CVE-2021-25828 |
medium | 6.1 | 0.0053 | 2026-10-29 | Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability | |
CVE-2023-37207 |
medium | 6.5 | 0.0074 | 2026-10-29 | A website could have obscured the fullscreen notification by using a URL with a scheme han | |
CVE-2022-29562 |
medium | 5.3 | 0.0075 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGG | |
CVE-2023-36386 |
medium | 6.1 | 0.0044 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGG | |
CVE-2023-36748 |
medium | 6.8 | 0.0024 | 2026-10-29 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGG | |
CVE-2023-23548 |
medium | 6.1 | 0.0041 | 2026-10-29 | Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p | |
CVE-2023-4045 |
medium | 5.3 | 0.0059 | 2026-10-29 | Offscreen Canvas did not properly track cross-origin tainting, which could have been used | |
CVE-2023-4049 |
medium | 5.9 | 0.0063 | 2026-10-29 | Race conditions in reference counting code were found through code inspection. These could | |
CVE-2023-4052 |
medium | 6.5 | 0.0071 | 2026-10-29 | The Firefox updater created a directory writable by non-privileged users. When uninstallin | |
CVE-2023-38469 |
medium | 6.2 | 0.0032 | 2026-10-29 | A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet | |
CVE-2023-38470 |
medium | 6.2 | 0.0032 | 2026-10-29 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label | |
CVE-2023-38471 |
medium | 6.2 | 0.0033 | 2026-10-29 | A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name | |
CVE-2023-38472 |
medium | 6.2 | 0.0032 | 2026-10-29 | A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse( |