Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 165 of 430.
- CVE-2023-51885 Memory corruption in ctan:mathtex
- CVE-2023-5188 WAGO Improper Input Validation in IEC61850 Server / Telecontrol
- CVE-2023-5187 Use after free in Chrome
- CVE-2023-5186 Use after free in Chrome
- CVE-2023-5185 Gym Management System Project v1.0 - Insecure File Upload
- CVE-2023-51847 An issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_
- CVE-2023-51843 Cross-site scripting in flatlogic:react dashboard
- CVE-2023-51842 MeshCentral algorithm-downgrade issue
- CVE-2023-51840 Hardcoded credentials in html-js:doracms
- CVE-2023-5184 Potential signed to unsigned conversion errors and buffer overflow vulnerabilities in the Zephyr IPM driver
- CVE-2023-51839 DeviceFarmer stf uses DES-ECB
- CVE-2023-51838 Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
- CVE-2023-51837 Ylianst MeshCentral Missing SSL Certificate Validation
- CVE-2023-51835 Command injection in trendnet:tew-822dre firmware
- CVE-2023-51833 Command injection in trendnet:tew-411brpplus firmware
- CVE-2023-5183 Authenticated RCE due to unsafe JSON deserialization
- CVE-2023-51828 SQL injection in sigb:pmb
- CVE-2023-51820 Code injection in blurams:lumi security camera a31c firmware
- CVE-2023-5182 Information disclosure in subiquity
- CVE-2023-51813 Cross-site request forgery in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-51812 Command injection in tenda:ax3 firmware
- CVE-2023-51810 SQL injection in stackideas:easydiscuss
- CVE-2023-5181 WP Discord Invite < 2.5.2 - Admin+ Stored Cross Site Scripting
- CVE-2023-51807 Cross-site scripting in ofcms project:ofcms
- CVE-2023-51806 File upload in ujcms:ujcms
- CVE-2023-51805 SQL injection in tduckcloud:tduck-platform
- CVE-2023-51804 Server-side request forgery in rymcu:forest
- CVE-2023-51803 LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
- CVE-2023-51802 Cross-site scripting in oretnom23:simple student attendance system
- CVE-2023-51801 SQL injection in oretnom23:simple student attendance system
- CVE-2023-51800 Cross-site scripting in school fees management system project:school fees management system1.0
- CVE-2023-5180 Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12
- CVE-2023-51798 Memory corruption in fedoraproject:fedora
- CVE-2023-51797 Memory corruption in fedoraproject:fedora
- CVE-2023-51796 Memory corruption in fedoraproject:fedora
- CVE-2023-51795 Memory corruption in fedoraproject:fedora
- CVE-2023-51794 Memory corruption in ffmpeg:ffmpeg
- CVE-2023-51793 Memory corruption in ffmpeg:ffmpeg
- CVE-2023-51792 Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocation size exceeding the
- CVE-2023-51791 Memory corruption in fedoraproject:fedora
- CVE-2023-51790 Cross-site scripting in piwigo:piwigo
- CVE-2023-5179 Memory corruption in ODA Drawings SDK - All Versions < 2024.10
- CVE-2023-51787 Denial of service in windriver:vxworks
- CVE-2023-51786 An issue was discovered in Lustre versions 2.13.x, 2.14.x, and 2.15.x before 2.15.4, allows attackers to escalate privileges and obtain sens
- CVE-2023-51785 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager
- CVE-2023-51784 Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager
- CVE-2023-51782 Use after free in debian:debian linux
- CVE-2023-51781 Use after free in debian:debian linux
- CVE-2023-51780 Use after free in debian:debian linux
- CVE-2023-5178 Kernel: use after free in nvmet_tcp_free_crypto in nvme
- CVE-2023-51779 bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition.
- CVE-2023-51778 Memory corruption in jungo:windriver
- CVE-2023-51777 Denial of service in jungo:windriver
- CVE-2023-51776 Privilege escalation in jungo:windriver
- CVE-2023-51775 jose4j denial of service via specifically crafted JWE
- CVE-2023-51774 json-jwt allows bypass of identity checks via a sign/encryption confusion attack
- CVE-2023-51773 Memory corruption in bacnetstack:bacnet stack
- CVE-2023-51772 Security feature bypass in oneidentity:password manager
- CVE-2023-51771 Memory corruption in starnight:micro http server
- CVE-2023-51770 Apache DolphinScheduler: Arbitrary File Read Vulnerability
- CVE-2023-5177 Vrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure
- CVE-2023-51769 Cross-site scripting in Frappe
- CVE-2023-51767 Auth bypass in fedoraproject:fedora
- CVE-2023-51766 Security feature bypass in debian:debian linux
- CVE-2023-51765 Security feature bypass in freebsd:freebsd
- CVE-2023-51764 Security feature bypass in fedoraproject:fedora
- CVE-2023-51763 ActiveAdmin CSV Injection leading to sensitive information disclosure
- CVE-2023-51761 Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authentication
- CVE-2023-5176 Memory corruption in Firefox
- CVE-2023-51751 Security feature bypass in scalefusion:scalefusion
- CVE-2023-51750 Security feature bypass in scalefusion:scalefusion
- CVE-2023-5175 Use after free in Firefox
- CVE-2023-51749 Security feature bypass in scalefusion:scalefusion
- CVE-2023-51748 Security feature bypass in scalefusion:scalefusion
- CVE-2023-51747 SMTP smuggling in Apache James
- CVE-2023-51746 Memory corruption in JT2Go
- CVE-2023-51745 Memory corruption in JT2Go
- CVE-2023-51744 Null dereference in JT2Go
- CVE-2023-51743 Buffer Overflow vulnerability in Skyworth Router
- CVE-2023-51742 Buffer Overflow vulnerability in Skyworth Router
- CVE-2023-51741 Cleartext Submission of Password vulnerability in Skyworth Router
- CVE-2023-51740 Cleartext Submission of Password vulnerability in Skyworth Router
- CVE-2023-5174 Use after free in Firefox
- CVE-2023-51739 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51738 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51737 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51736 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51735 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51734 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51733 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51732 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51731 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51730 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-5173 Integer overflow in Firefox
- CVE-2023-51729 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51728 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51727 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51726 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51725 Stored Cross Site Scripting Vulnerability in Skyworth Router
- CVE-2023-51724 Stored Cross Site Scripting Vulnerability in Skyworth Router