Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 164 of 430.
- CVE-2023-5209 Bookly < 22.5 - Admin+ Stored XSS
- CVE-2023-52086 File upload in startutorial:php backend for resumable.js
- CVE-2023-52085 Winter CMS Local File Inclusion through Server Side Template Injection
- CVE-2023-52084 Winter CMS Stored XSS through Backend ColorPicker FormWidget
- CVE-2023-52083 Stored XSS through privileged upload of Media Manager file followed by renaming
- CVE-2023-52082 Lychee is vulnerable to an SQL Injection in explain DB queries.
- CVE-2023-52081 ewen-lbh/ffcss late-Unicode normalization vulnerability
- CVE-2023-52080 IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function.
- CVE-2023-52079 Conversion of property names to strings can trigger infinite recursion
- CVE-2023-52077 External apps using tokens issued by administrators and moderators can call admin APIs
- CVE-2023-52076 Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
- CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching
- CVE-2023-52074 Cross-site request forgery in flycms project:flycms
- CVE-2023-52073 Cross-site request forgery in flycms project:flycms
- CVE-2023-52072 Cross-site request forgery in flycms project:flycms
- CVE-2023-52070 Memory corruption in jfree:jfreechart
- CVE-2023-5207 Execution with Unnecessary Privileges in GitLab
- CVE-2023-52069 Cross-site scripting in kodcloud:kodbox
- CVE-2023-52068 Cross-site scripting in kodcloud:kodbox
- CVE-2023-52066 http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter.
- CVE-2023-52064 SQL injection in wuzhicms:wuzhicms
- CVE-2023-52060 Cross-site request forgery in gestsup:gestsup
- CVE-2023-52059 Cross-site scripting in gestsup:gestsup
- CVE-2023-5205 Add Custom Body Class <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-52048 Cross-site scripting in ruoyi:ruoyi
- CVE-2023-52047 Cross-site request forgery in dedecms:dedecms
- CVE-2023-52046 Cross-site scripting in webmin:webmin
- CVE-2023-52045 Cross-site scripting in std42:elfinder
- CVE-2023-52044 File upload in std42:elfinder
- CVE-2023-52043 An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wireless Access Point Pas
- CVE-2023-52042 Command injection in totolink:x6000r firmware
- CVE-2023-52041 Other in totolink:x6000r firmware
- CVE-2023-52040 Command injection in totolink:x6000r firmware
- CVE-2023-5204 AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response
- CVE-2023-52039 Command injection in totolink:x6000r firmware
- CVE-2023-52038 Command injection in totolink:x6000r firmware
- CVE-2023-52032 Command injection in totolink:ex1200t firmware
- CVE-2023-52031 Command injection in totolink:a3700r firmware
- CVE-2023-52030 Command injection in totolink:a3700r firmware
- CVE-2023-5203 WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection
- CVE-2023-52029 Command injection in totolink:a3700r firmware
- CVE-2023-52028 Command injection in totolink:a3700r firmware
- CVE-2023-52027 Command injection in totolink:a3700r firmware
- CVE-2023-52026 Command injection in totolink:ex1800t firmware
- CVE-2023-5201 OpenHook <= 4.3.0 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
- CVE-2023-5200 flowpaper <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5199 PHP to Page <= 0.3 - Authenticated (Subscriber+) Local File Inclusion to Remote Code Execution via Shortcode
- CVE-2023-51987 Auth bypass in dlink:dir-822 firmware
- CVE-2023-51984 Command injection in dlink:dir-822 firmware
- CVE-2023-51982 CrateDB authentication bypass vulnerability
- CVE-2023-5198 Incorrect Authorization in GitLab
- CVE-2023-51978 SQL injection in phpgurukul:art gallery management system
- CVE-2023-51972 Command injection in tenda:ax1803 firmware
- CVE-2023-51971 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51970 Memory corruption in tenda:ax1803 firmware
- CVE-2023-5197 Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-51969 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51968 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51967 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51966 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51965 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51964 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51963 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51962 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51961 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51960 Memory corruption in tenda:ax1803 firmware
- CVE-2023-5196 DoS via Channel Notification Properties
- CVE-2023-51959 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51958 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51957 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51956 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51955 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51954 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51953 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51952 Memory corruption in tenda:ax1803 firmware
- CVE-2023-51951 SQL injection in stock management system project:stock management system
- CVE-2023-5195 A team member can soft delete other teams that they are not part of
- CVE-2023-51949 Cross-site request forgery in verydows:verydows
- CVE-2023-51948 Information disclosure in actidata:actinas sl 2u-8 rdx firmware
- CVE-2023-51947 Missing authorization in actidata:actinas sl 2u-8 rdx firmware
- CVE-2023-51946 Cross-site scripting in actidata:actinas sl 2u-8 rdx firmware
- CVE-2023-5194 A system/user manager can demote / deactivate another manager
- CVE-2023-51939 Other in relic project:relic
- CVE-2023-51931 Denial of service in alanclarke:urlite
- CVE-2023-5193 System Role with manage posts permission can read posts of Direct Messages
- CVE-2023-51928 File upload in yonyou:yonbip
- CVE-2023-51927 SQL injection in yonyou:yonbip
- CVE-2023-51926 Path traversal in yonyou:yonbip
- CVE-2023-51925 File upload in yonyou:yonbip
- CVE-2023-51924 File upload in yonyou:yonbip
- CVE-2023-5192 Excessive Data Query Operations in a Large Data Table in pimcore/demo
- CVE-2023-51906 Code injection in yonyou:yonbip
- CVE-2023-5190 Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page
- CVE-2023-51892 Code injection in weaver:e-cology
- CVE-2023-51890 Denial of service in ctan:mathtex
- CVE-2023-5189 Hub: insecure galaxy-importer tarfile extraction
- CVE-2023-51889 Memory corruption in ctan:mathtex
- CVE-2023-51888 Memory corruption in ctan:mathtex
- CVE-2023-51887 Command injection in ctan:mathtex
- CVE-2023-51886 Memory corruption in ctan:mathtex