Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 122 of 430.
- GHSA-f99h-w337-mv56 Panic when parsing ranges with invalid masks in github.com/malfunkt/iprange
- GHSA-f8pq-3926-8gx5 Unsanitized user controlled input in module generation
- GHSA-f5v5-ccqc-6w36 TLS certificate common name validation bypass
- GHSA-f2wx-xjfw-xjv6 topgrade Time-of-check Time-of-use (TOCTOU) Race Condition in remove_dir_all
- GHSA-f28g-86hc-823q Tokenizer vulnerable to client brute-force of token secrets
- GHSA-cw7j-v52w-fp5r copyparty vulnerable to reflected cross-site scripting via hc parameter
- GHSA-crhg-xgrg-vvcc a12nserver vulnerable to potential SQL Injections via Knex dependency
- GHSA-cpmr-mw4j-99r7 Nginx alias path traversal allows unauthenticated attackers to read all files on /label_studio/core/
- GHSA-cp47-r258-q626 Vega vulnerable to arbitrary code execution when clicking href links
- GHSA-cfxh-frx4-9gjg Cross-site Scripting in @spscommerce/ds-react
- GHSA-c45c-39f6-6gw9 Rancher generated tokens not revoked after modifications made to authentication provider
- GHSA-c2hm-mjxv-89r4 Multiple soundness issues
- GHSA-9wmc-rg4h-28wv github.com/kumahq/kuma affected by CVE-2023-44487
- GHSA-9wgg-m99q-hhfc Expired tokens can be renewed without validating the account password
- GHSA-9vx8-f5c4-862x XML External Entity (XXE) vulnerability in apoc.import.graphml
- GHSA-9qwg-crg9-m2vc `openssl` `SubjectAlternativeName` and `ExtendedKeyUsage::other` allow arbitrary file read
- GHSA-9phh-r37v-34wh lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files
- GHSA-9jxr-mwpp-w643 Improper header validation in httpsoft/http-message
- GHSA-9j5w-2cqc-cwj9 Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor
- GHSA-99jv-8292-2hpm Impact The eventing-gitlab cluster-local server doesn't set `ReadHeaderTimeout` which could lead do a DDoS attack, where a large gro
- GHSA-94vc-p8w7-5p49 Bundled libwebp in imagecodecs vulnerable
- GHSA-946c-f9w6-2c25 Download route allows filename change in eZpublish kernel
- GHSA-8wx3-324g-w4qq OpenSearch uncontrolled resource consumption
- GHSA-8www-cffh-4q98 Anyone with a share link can RESET all website data in Umami
- GHSA-8qxh-2gh8-r923 cheqd-node subject to Cosmos SDK "Barberry" vulnerability
- GHSA-8f24-6m29-wm2r use-after-free in tracing
- GHSA-8c6x-g4fw-8rf4 Whatsapp-Chat-Exporter has Cross-Site Scripting vulnerability in HTML output of chats.
- GHSA-8c37-7qx3-4c4p Blst has logical error in SigValidate in Go bindings
- GHSA-87mf-9wg6-ppf8 Ouroboros is Unsound
- GHSA-86q5-qcjc-7pv4 Presto JDBC Server-Side Request Forgery by nextUri
- GHSA-83fm-w79m-64r5 Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs
- GHSA-829q-v5g8-hhxc CakePHP has incorrect Cross-Site Request Forgery validation
- GHSA-7ww5-4wqc-m92c containerd allows RAPL to be accessible to a container
- GHSA-7vwr-g6pm-9hc8 Cookie leakage between different users in fastapi-proxy-lib
- GHSA-7vpr-3ppw-qrpj Imageflow affected by libwebp zero-day and should not be used with malicious source images.
- GHSA-7vh7-fw88-wj87 Several quadratic complexity bugs may lead to denial of service in Commonmarker
- GHSA-7vcx-v65q-9wpg XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
- GHSA-7p92-x423-vwj6 Plonk verifier KZG multi point verification
- GHSA-7mc6-x925-7qvx Test code in published microsoft-graph-beta package exposes phpinfo()
- GHSA-7crc-r3wg-cfgf Json response for search reveals Solr credentials
- GHSA-7cgc-fjv4-52x6 Malware in pre-build binaries of bignum
- GHSA-7c94-gvvj-r3mg cheqd-node affected by Inter-blockchain Communication (IBC) protocol "Huckleberry" vulnerability
- GHSA-7c2q-5qmr-v76q DoS vulnerabilities persist in ESAPI file uploads despite remediation of CVE-2023-24998
- GHSA-76r7-h46w-463r Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
- GHSA-72fp-w44g-625q Signing DynamoDB Sets when using the AWS Database Encryption SDK.
- GHSA-6xv5-86q9-7xr8 SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced
- GHSA-6x4h-9622-fqr6 Improper validation in meraki
- GHSA-6w5f-5wgr-qjg5 Constellation allows Emergency shell access during initramfs boot phase
- GHSA-6r78-m64m-qwcf Moq v4.20.0-rc to 4.20.1 share hashed user data
- GHSA-6hg4-vp5q-47mw CakePHP allows direct access of prefixed controller actions
- GHSA-6hcf-g6gr-hhcr `openssl` `X509Extension::new` and `X509Extension::new_nid` null pointer dereference
- GHSA-6g3j-p5g6-992f OpenSearch StackOverflow vulnerability
- GHSA-68jh-rf6x-836f @apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
- GHSA-636f-xm5j-pj9m Several quadratic complexity bugs may lead to denial of service in Commonmarker
- GHSA-5x5q-8cgm-2hjq Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
- GHSA-5x36-7567-3cw6 partial_sort contains Out-of-bounds Read in release mode
- GHSA-5wrg-8fxp-cx9r passport-wsfed-saml2 Signature Bypass vulnerability
- GHSA-5fp6-4xw3-xqq3 @keystone-6/core's bundled cuid package known to be insecure
- GHSA-5fm9-h728-fwpj trust-dns vulnerable to Remote Attackers causing Denial-of-Service (packet loops) with crafted DNS packets
- GHSA-5cpq-8wj7-hf2v Vulnerable OpenSSL included in cryptography wheels
- GHSA-58qw-p7qm-5rvh Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
- GHSA-56fm-hfp3-x3w3 Wallabag user can disable 2FA unintentionally
- GHSA-54xq-cgqr-rpm3 sharp vulnerability in libwebp dependency CVE-2023-4863
- GHSA-4xgv-j62q-h3rj Panic during unmarshal of Hello Verify Request in github.com/pion/dtls/v2
- GHSA-4vjr-crvh-383h @napi-rs/image affected by libwebp CVE
- GHSA-4rgc-5g6r-2rjf lakeFS logs S3 credentials in plain text
- GHSA-4q83-7cq4-p6wg `tokio::io::ReadHalf<T>::unsplit` is Unsound
- GHSA-4q66-g4mm-8rg5 Silverstripe has Cross-site Scripting (XSS) vulnerabilities inherited from TinyMCE
- GHSA-4mqg-h5jf-j9m7 TorchServe Pre-Auth Remote Code Execution
- GHSA-4h72-34j6-j8x7 Maloja error page XSS vulnerability
- GHSA-4c29-gfrp-g6x9 CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
- GHSA-48wp-p9qv-4j64 Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service
- GHSA-48m6-wm5p-rr6h Insufficient covariance check makes self_cell unsound
- GHSA-475v-pq2g-fp9g s2n-quic potential denial of service via crafted stream frames
- GHSA-3wxx-jxwc-mg39 bottlerocket dependency openssl has a double free vulnerability
- GHSA-3w9w-9833-gcpv Security bug in ConvertToSinglePlane when used with untrusted content from the DDS loader
- GHSA-3mv5-343c-w2qg Ref methods into_ref, into_mut, into_slice, and into_slice_mut are unsound when used with cell::Ref or cell::RefMut
- GHSA-3hwm-922r-47hw Stud42 vulnerable to denial of service
- GHSA-3gxf-9r58-2ghg `openssl` `X509NameBuilder::build` returned object is not thread safe
- GHSA-37xq-q42p-rv3p ntpd has Dependency on Vulnerable Third-Party Component
- GHSA-373w-rj84-pv6x SafeURL-Python's hostname blocklist does not block FQDNs
- GHSA-36xm-35qq-795w Exposes reference to non-Sync data to an arbitrary thread
- GHSA-344m-qcjq-xgrf Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
- GHSA-3244-8mff-w398 Reflected XSS in Gotify's /docs via import of outdated Swagger UI
- GHSA-2xpm-cmvw-3jcc Reflected XSS in Application Logger module
- GHSA-2w8w-qhg4-f78j A stored XSS in jaeger UI might allow an attacker who controls a trace to perform arbitrary jaeger queries
- GHSA-2qv5-7mw5-j3cg spin-rs initialisation failure in `Once::try_call_once` can lead to undefined behaviour for other initialisers
- GHSA-2fch-hv74-fgw9 Cross site scripting (XSS) in wwbn/avideo
- GHSA-2c7c-3mj9-8fqh Decryption of malicious PBES2 JWE objects can consume unbounded system resources
- GHSA-26hr-q2wp-rvc5 Impact When lakeFS is configured with **ALL** of the following: - Configuration option `auth.encrypt.secret_key` passed through environm
- GHSA-23px-mw2p-46qm Cosmos-SDK Cosmovisor component may be vulnerable to denial of service
- GHSA-2326-pfpj-vx3h lexical-core has multiple soundness issues
- GHSA-22rr-f3p8-5gf8 Directus affected by VM2 sandbox escape vulnerability
- DRUPAL-CORE-2023-004 Drupal core provides a page that outputs the markup from `phpinfo()` to assist with diagnosing PHP configuration.
- DRUPAL-CORE-2023-003 The language module provides a Language switcher block which can be placed to provide links to quickly switch between different languages.
- DRUPAL-CORE-2023-002 The Media module does not properly check entity access in some circumstances.
- DRUPAL-CORE-2023-001 The Media Library module does not properly check entity access in some circumstances.
- DRUPAL-CONTRIB-2023-055 This module allows you to turn various data sources (Eg CSV or JSON file) into interactive visualisation.
- DRUPAL-CONTRIB-2023-054 The Group module has the ability to make content private to specific groups.
- DRUPAL-CONTRIB-2023-053 The Xsendfile module enables fast transfer for private files in Drupal.