Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 136 of 430.
- CVE-2023-5927 Campcodes Simple Student Information System manage_course.php sql injection
- CVE-2023-5926 Campcodes Simple Student Information System update_status.php sql injection
- CVE-2023-5925 Campcodes Simple Student Information System Master.php sql injection
- CVE-2023-5924 Campcodes Simple Student Information System view_course.php sql injection
- CVE-2023-5923 Campcodes Simple Student Information System index.php sql injection
- CVE-2023-5922 Royal Elementor Addons and Templates < 1.3.81 - Unauthenticated Arbitrary Post Read
- CVE-2023-5921 Function Bypass in Geodi
- CVE-2023-5920 Lack Of Secure Keyboard Entry Protection in MacOS Desktop
- CVE-2023-5919 SourceCodester Company Website CMS Create Blog Page createblog unrestricted upload
- CVE-2023-5918 SourceCodester Visitor Management System manage_user.php sql injection
- CVE-2023-5917 phpBB Smiley Pack acp_icons.php main cross site scripting
- CVE-2023-5916 Lissy93 Dashy Configuration save access control
- CVE-2023-5915 Denial of service in STARDOM
- CVE-2023-5914 Cross-site scripting (XSS)
- CVE-2023-5913 A potential Privilege Escalation vulnerability in opentext Fortify ScanCentral DAST API.
- CVE-2023-5912 Memory corruption in Notebook BIOS
- CVE-2023-5911 WP Custom Cursors <= 3.2 - Admin+ Stored XSS
- CVE-2023-5910 PopojiCMS Web Config install.php cross site scripting
- CVE-2023-5909 Improper Validation of Certificate with Host Mismatch in PTC KEPServerEx
- CVE-2023-5908 Heap Based Buffer Overflow in PTC KEPServerEx
- CVE-2023-5907 File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
- CVE-2023-5906 Job Manager & Career < 1.4.4 - Directory listing to Sensitive Data Exposure
- CVE-2023-5905 DeMomentSomTres WordPress Export Posts With Images <= 20220825 - Subscriber+ unauthorized data export
- CVE-2023-5904 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- CVE-2023-5903 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- CVE-2023-5902 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- CVE-2023-5901 Cross-site Scripting in pkp/pkp-lib
- CVE-2023-5900 Cross-Site Request Forgery in pkp/pkp-lib
- CVE-2023-5899 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- CVE-2023-5898 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- CVE-2023-5897 Cross-Site Request Forgery (CSRF) in pkp/customLocale
- CVE-2023-5896 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- CVE-2023-5895 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
- CVE-2023-5894 Cross-site Scripting (XSS) - Stored in pkp/ojs
- CVE-2023-5893 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- CVE-2023-5892 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
- CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- CVE-2023-5889 Insufficient Session Expiration in pkp/pkp-lib
- CVE-2023-5886 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
- CVE-2023-5885 Franklin Electric Fueling Systems Colibri Path Traversal
- CVE-2023-5884 Word Balloon < 4.20.3 - Avatar Removal via CSRF
- CVE-2023-5882 WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRF
- CVE-2023-5881 Unauthenticated access permitted to web interface page "Garage Door Control Module Setup"
- CVE-2023-5880 Cross-site scripting in Aladdin Connect (Retrofit-Kit)
- CVE-2023-5879 Aladdin Connect Android Application Insecure Storage
- CVE-2023-5878 OneWireless command injection possible when updating firmware
- CVE-2023-5877 affiliate-toolkit < 3.4.3 - Unauthenticated SSRF
- CVE-2023-5876 Regex DoS from a malicious server enrolled in Desktop
- CVE-2023-5875 Lack of Hardening against media exploitation from a remote origin
- CVE-2023-5874 Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
- CVE-2023-5873 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-5872 Wago: Vulnerability in Smart Designer Web-Application
- CVE-2023-5871 Libnbd: malicious nbd server may crash libnbd
- CVE-2023-5870 Postgresql: role pg_signal_backend can signal certain superuser processes.
- CVE-2023-5869 Postgresql: buffer overrun from integer overflow in array modification
- CVE-2023-5868 Postgresql: memory disclosure in aggregate function calls
- CVE-2023-5867 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5866 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq
- CVE-2023-5865 Insufficient Session Expiration in thorsten/phpmyfaq
- CVE-2023-5864 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-5863 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2023-5862 Missing Authorization in hamza417/inure
- CVE-2023-5861 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-5860 Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
- CVE-2023-5859 Security feature bypass in Chrome
- CVE-2023-5858 Security feature bypass in Chrome
- CVE-2023-5857 Other in Chrome
- CVE-2023-5856 Use after free in Chrome
- CVE-2023-5855 Use after free in Chrome
- CVE-2023-5854 Use after free in Chrome
- CVE-2023-5853 Security feature bypass in Chrome
- CVE-2023-5852 Use after free in Chrome
- CVE-2023-5851 Security feature bypass in Chrome
- CVE-2023-5850 Security feature bypass in Chrome
- CVE-2023-5849 Integer overflow in Chrome
- CVE-2023-5847 Privilege escalation in Nessus
- CVE-2023-5846 Use of Password Hash With Insufficient Computational Effort in Franklin Fueling System TS-550
- CVE-2023-5845 Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access
- CVE-2023-5844 Unverified Password Change in pimcore/admin-ui-classic-bundle
- CVE-2023-5843 Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution
- CVE-2023-5842 Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr
- CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing
- CVE-2023-5840 Weak Password Recovery Mechanism for Forgotten Password in linkstackorg/linkstack
- CVE-2023-5839 Privilege Chaining in hestiacp/hestiacp
- CVE-2023-5838 Insufficient Session Expiration in linkstackorg/linkstack
- CVE-2023-5837 AlexanderLivanov FotosCMS2 Cookie profile.php cross site scripting
- CVE-2023-5836 SourceCodester Task Reminder System sql injection
- CVE-2023-5835 hu60t hu60wap6 ubbparser.php markdown cross site scripting
- CVE-2023-5834 Vagrant’s Windows Installer Allowed Directory Junction Write
- CVE-2023-5833 Improper Access Control in mintplex-labs/anything-llm
- CVE-2023-5832 Improper Input Validation in mintplex-labs/anything-llm
- CVE-2023-5831 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-5830 ColumbiaSoft Document Locator WebTools login improper authentication
- CVE-2023-5829 code-projects Admission Management System student_avatar.php unrestricted upload
- CVE-2023-5828 SQL injection in Longxing Industrial Development Zone Project Construction and Installation Management System
- CVE-2023-5827 Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx sql injection
- CVE-2023-5826 Netentsec NS-ASG Application Security Gateway list_onlineuser.php sql injection
- CVE-2023-5825 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
- CVE-2023-5824 Squid: dos against http and https