Search
2,007 CVEs · Low severity
CVEs (2,007, showing first 500)
Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.
Showing 1–25 of 2,007 (capped at 500)
| CVE ID ↑ | Severity | Patch | CVSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-22631 | LOW | Patched | 2.7 | 2026-09-14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor. |
| CVE-2023-22632 | LOW | Patched | 2.7 | 2026-09-14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor. |
| CVE-2023-24034 | LOW | Patched | 3.1 | 2026-09-14 | An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability. |
| CVE-2023-24035 | LOW | Patched | 3.5 | 2026-09-14 | An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to br… |
| CVE-2023-24283 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file. |
| CVE-2023-24284 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function. |
| CVE-2023-24285 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed. |
| CVE-2023-24286 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter. |
| CVE-2023-24287 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command. |
| CVE-2023-24288 | LOW | Patched | 2.9 | 2026-09-14 | An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states. |
| CVE-2023-24291 | LOW | Patched | 2.9 | 2026-09-14 | Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter. |
| CVE-2023-31308 | LOW | 3.3 | 2026-08-31 | A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read. | |
| CVE-2023-32778 | LOW | Patched | 3.3 | 2026-09-14 | An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload. |
| CVE-2023-3360 | LOW | Patched | 3.3 | 2026-09-02 | The Weaver Show Posts WordPress plugin before 1.8.1 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege use… |
| CVE-2023-37252 | LOW | 3.1 | 2026-09-14 | An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden. | |
| CVE-2023-37253 | LOW | 3.1 | 2026-09-14 | An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables. | |
| CVE-2023-37366 | LOW | 2.8 | 2026-09-14 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exynos 9610, Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exyn… | |
| CVE-2024-14043 | LOW | 6.3 | 2026-08-12 | A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the c… | |
| CVE-2024-14044 | LOW | 6.3 | 2026-08-12 | A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handl… | |
| CVE-2024-14045 | LOW | 6.3 | 2026-08-18 | A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy… | |
| CVE-2024-14046 | LOW | 6.3 | 2026-08-18 | A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse… | |
| CVE-2024-4412 | LOW | 2.7 | 2026-10-19 | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution… | |
| CVE-2025-1218 | LOW | Patched | 3.4 | 2026-09-25 | The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL serv… |
| CVE-2025-12627 | LOW | Patched | 2.4 | 2026-08-06 | The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions. This allows an attacker who has obtained … |
| CVE-2025-13166 | LOW | 3.7 | 2026-09-15 | The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of registered user accounts based on the responses received during t… |