Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 123 of 430.
- DRUPAL-CONTRIB-2023-052 This module enables you to pay online via Mollie.
- DRUPAL-CONTRIB-2023-051 The GraphQL module enables you to build GraphQL APIs which can include data fetching through Queries and data updates (create, update, delete) through mutations.
- DRUPAL-CONTRIB-2023-050 This module lets you craft and expose a GraphQL schema for Drupal 9 and 10.
- DRUPAL-CONTRIB-2023-049 This module enables you to view all paragraph entities in an admin view.
- DRUPAL-CONTRIB-2023-048 This module enables users to log in by email address with minimal configurations.
- DRUPAL-CONTRIB-2023-047 This module enables notifications to be sent to all users of a particular role, or to the content's author when a piece of content is transi
- DRUPAL-CONTRIB-2023-045 This module enables users to log in by email address with minimal configurations.
- DRUPAL-CONTRIB-2023-044 The Webprofiler module provides a way of displaying the Symfony profile debugging tool at the bottom of each page.
- DRUPAL-CONTRIB-2023-043 Provides [highlight.php](https://github.com/scrivo/highlight.php "highlight.php") integration to Drupal, allowing <code> blocks to be automa
- DRUPAL-CONTRIB-2023-042 This module enables you to hide email addresses from bots and site scrapers by using the rot13 strategy.
- DRUPAL-CONTRIB-2023-041 This module makes PatternLab's custom Twig functions available to Drupal theming.
- DRUPAL-CONTRIB-2023-040 The Data Field module provides a way of building field types that are made up of other fields, a simpler alternative to e.g.
- DRUPAL-CONTRIB-2023-039 This module aims to prevent broken content references by informing content editors either on delete or archive moderation.
- DRUPAL-CONTRIB-2023-038 This module provides integration with Shorthand, an application which describes itself as "beautifully simple storytelling".
- DRUPAL-CONTRIB-2023-037 This module enables you to build administrative pages for managing configuration objects, which may then be used elsewhere in the site.
- DRUPAL-CONTRIB-2023-035 This module changes your forum administration page to allow you to set forums private.
- DRUPAL-CONTRIB-2023-034 The ACL module, short for Access Control Lists, is an API for other modules to create lists of users and give them access to nodes.
- DRUPAL-CONTRIB-2023-033 This module enables you to add the Matomo web statistics tracking system to your website.
- DRUPAL-CONTRIB-2023-032 Carefully crafted input by an attacker will not be sanitized by this module, which can result in a script injection.
- DRUPAL-CONTRIB-2023-031 The module doesn’t sufficiently protect against malicious links, which means an attacker can trick an administrator into performing unwanted actions.
- DRUPAL-CONTRIB-2023-030 This module enables you to allow and/or require users to use a second authentication method in addition to password authentication.
- DRUPAL-CONTRIB-2023-029 This module enables sites to comply with the European cookie law using tarteaucitron.js.
- DRUPAL-CONTRIB-2023-028 This module enables you to render a field in an expandable/collapsible region.
- DRUPAL-CONTRIB-2023-027 This module enables a UI to display all libraries provided by modules and themes on the Drupal site.
- DRUPAL-CONTRIB-2023-026 This module enables you to use complex autocompletion in forms.
- DRUPAL-CONTRIB-2023-025 This module provides integration with Mailchimp, a popular email delivery service.
- DRUPAL-CONTRIB-2023-024 This module enables you to create dynamic layouts and add sample color palettes for color selection hints via its UI.
- DRUPAL-CONTRIB-2023-023 This module enables you to define configurable GDPR alert messages.
- DRUPAL-CONTRIB-2023-021 CivicCookieControl is a module that can help make a website compliant with EU and UK cookie legislation.
- DRUPAL-CONTRIB-2023-020 This module enables you to define a 'weekly office hours' field type, and add a field to any Content type, in order to display the weekly op
- DRUPAL-CONTRIB-2023-019 This module provides social media share & follow buttons.
- DRUPAL-CONTRIB-2023-018 This module provides social media share & follow buttons.
- DRUPAL-CONTRIB-2023-017 The Consent Popup provides a configurable popup that requires acceptance of a question before the visitor can continue, typically used for age consent.
- DRUPAL-CONTRIB-2023-016 The Iubenda Integration module provides a custom block to provide a link to the Iubenda privacy policy.
- DRUPAL-CONTRIB-2023-014 S3 File System (s3fs) provides an additional file system to your Drupal site, which stores files in Amazon's Simple Storage Service (S3) or
- DRUPAL-CONTRIB-2023-013 This module enables you to secure any page with a password.
- DRUPAL-CONTRIB-2023-012 This module is a tool for developers, analysts, and administrators that allows them to generate reports on a given Drupal installation.
- DRUPAL-CONTRIB-2023-011 The security team is marking this project unsupported.
- DRUPAL-CONTRIB-2023-010 The Media Responsive Thumbnail module allows media reference fields to be rendered as a responsive image.
- DRUPAL-CONTRIB-2023-009 This module provides a new UI experience for node editing - Gutenberg editor.
- DRUPAL-CONTRIB-2023-008 This module enables you to associate Forums as Group 1.x content and use Group access permissions.
- DRUPAL-CONTRIB-2023-006 This module enables you to add social sharing buttons to a site.
- DRUPAL-CONTRIB-2023-005 The Apigee Edge module allows connecting a Drupal site to Apigee X / Edge in order to build a developer portal.
- DRUPAL-CONTRIB-2023-004 This module enables you to use the media library in custom forms without the Media Library Widget.
- DRUPAL-CONTRIB-2023-003 The Media Library Block module allows you to render a media entity in a block.
- DRUPAL-CONTRIB-2023-002 The Entity Browser module allows you to select entities from entity reference fields using a custom entity browser widget.
- DRUPAL-CONTRIB-2023-001 This module enables users to create 'private' vocabularies.
- CVE-2023-7357 FlexNet Publisher lmadmin Rogue Vendor Daemon Vulnerability
- CVE-2023-7356 Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
- CVE-2023-7346 Ledger Bitcoin App 2.1.0 Address Derivation Error via Miniscript
- CVE-2023-7345 Ledger Live hw-app-eth EIP-712 Message Parsing Integer Truncation
- CVE-2023-7343 Belden Industrial HiVision Arbitrary Code Execution via Malicious Project File
- CVE-2023-7342 Belden HiSecOS Web Server Privilege Escalation
- CVE-2023-7340 Wazuh authd service (os_auth) Heap-based Buffer Overflow
- CVE-2023-7339 Data collection for dowloading leads into buffer overflow
- CVE-2023-7338 Ruckus Unleashed Authenticated RCE in Gateway Mode
- CVE-2023-7337 SQL injection in JS Help Desk – AI-Powered Support & Ticketing System
- CVE-2023-7335 EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statistics
- CVE-2023-7334 Changjetong T+ <= 16.x GetStoreWarehouseByStore Deserialization RCE
- CVE-2023-7333 bluelabsio records-mover Table Object sql injection
- CVE-2023-7332 PocketMine-MP < 4.18.1 Improper Validation of Dropped Item Count Allows Remote Server Crash
- CVE-2023-7331 PKrystian Full-Stack-Bank User sql injection
- CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php
- CVE-2023-7329 Tinycontrol LAN Controller v3 (LK3) Remote DoS
- CVE-2023-7328 Screen SFT DAB 600/C <= 1.9.3 Unauthenticated Information Disclosure
- CVE-2023-7327 Ozeki SMS Gateway <= 10.3.208 Unauthenticated Arbitrary File Read
- CVE-2023-7326 Epson Stylus SX510W Printer Remote Power Off DoS
- CVE-2023-7325 Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF
- CVE-2023-7324 scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
- CVE-2023-7323 Nagios Log Server < 2024R1 XSS via Create User Function
- CVE-2023-7322 Nagios Log Server < 2024R1 Incorrect Authorization Granting Full API Access
- CVE-2023-7321 Nagios Log Server < 2.1.14 XSS via Snapshots Page
- CVE-2023-7320 WooCommerce <= 7.8.2 - Sensitive Information Exposure
- CVE-2023-7319 Nagios Network Analyzer < 2024R1 XSS via Percentile Calculator Menu
- CVE-2023-7318 Nagios XI < 2024R1.0.2 XSS via Core Command Expansion
- CVE-2023-7317 Nagios XI < 2024R1 Web SSH Terminal Missing Access Control
- CVE-2023-7316 Nagios XI < 2024R1 XSS via Graph Explorer
- CVE-2023-7315 Nagios XI < 5.11.3 XSS via Graph Explorer
- CVE-2023-7314 Nagios XI < 5.11.3 XSS via Bandwidth Report
- CVE-2023-7313 Nagios XI < 5.11.3 XSS via Bulk Modifications
- CVE-2023-7312 Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail
- CVE-2023-7311 BYTEVALUE Intelligent Flow Control Router Command Injection
- CVE-2023-7309 Dahua Smart Park Integrated Management Platform Front-End Arbitrary File Upload
- CVE-2023-7308 SecGate3600 Firewall Information Disclosure via authManageSet.cgi
- CVE-2023-7307 Sangfor Behavior Management System XML External Entity Injection
- CVE-2023-7306 Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion
- CVE-2023-7305 SmartBI RMIServlet Unrestricted File Upload RCE
- CVE-2023-7304 Ruijie RG-UAC nmc_sync.php Command Injection
- CVE-2023-7303 q2apro q2apro-on-site-notifications q2apro-onsitenotifications-page.php process_request cross site scripting
- CVE-2023-7300 Path traversal in HarmonyOS AILife Solution 8.0
- CVE-2023-7299 DataGear resolveSql sql injection
- CVE-2023-7298 Out-of-Bounds Write Vulnerability in in Autodesk Desktop Software
- CVE-2023-7297 TwitterPosts <= 1.0.2 - Settings Update via CSRF
- CVE-2023-7296 BigBlueButton <= 3.0.0-beta.4 - Authenticated (Author+) Stored Cross-Site Scripting
- CVE-2023-7295 Video Grid <= 1.21 - Reflected Cross-Site Scripting
- CVE-2023-7294 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_profile'
- CVE-2023-7293 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_mollie_account_details'
- CVE-2023-7292 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_notice_dismiss'
- CVE-2023-7291 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'create_mollie_account'
- CVE-2023-7290 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'check_for_verified_profiles'