Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 170 of 430.
- CVE-2023-51331 Code injection in phpjabbers:cleaning business software
- CVE-2023-51330 Cross-site scripting in phpjabbers:cinema booking system
- CVE-2023-5133 User Activity Log Pro < 2.3.4 - IP Spoofing
- CVE-2023-51328 Cross-site scripting in phpjabbers:cleaning business software
- CVE-2023-51327 Denial of service in phpjabbers:cleaning business software
- CVE-2023-51326 Denial of service in phpjabbers:cleaning business software
- CVE-2023-51325 Cross-site scripting in phpjabbers:shared asset booking system
- CVE-2023-51324 Code injection in phpjabbers:shared asset booking system
- CVE-2023-51323 Denial of service in phpjabbers:shared asset booking system
- CVE-2023-51321 Denial of service in phpjabbers:night club booking software
- CVE-2023-51320 Code injection in phpjabbers:night club booking software
- CVE-2023-5132 Soisy Pagamento Rateale <= 6.0.1 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-51319 Code injection in phpjabbers:bus reservation system
- CVE-2023-51318 Cross-site scripting in phpjabbers:bus reservation system
- CVE-2023-51317 Cross-site scripting in phpjabbers:restaurant booking system
- CVE-2023-51316 Denial of service in phpjabbers:bus reservation system
- CVE-2023-51315 Cross-site scripting in phpjabbers:restaurant booking system
- CVE-2023-51314 Denial of service in phpjabbers:restaurant booking system
- CVE-2023-51313 Code injection in phpjabbers:restaurant booking system
- CVE-2023-51312 Cross-site scripting in phpjabbers:restaurant booking system
- CVE-2023-51311 Code injection in phpjabbers:car park booking system
- CVE-2023-51310 Denial of service in phpjabbers:car park booking system
- CVE-2023-5131 Delta Electronics ISPSoft Heap Buffer-Overflow
- CVE-2023-51309 Denial of service in phpjabbers:car park booking system
- CVE-2023-51308 Cross-site scripting in phpjabbers:car park booking system
- CVE-2023-51306 Cross-site scripting in phpjabbers:event ticketing system
- CVE-2023-51305 PHPJabbers Car Park Booking System v3.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "name, plugin_sms_api_key, plugin
- CVE-2023-51303 Cross-site scripting in phpjabbers:event ticketing system
- CVE-2023-51302 Code injection in phpjabbers:hotel booking system
- CVE-2023-51301 Denial of service in phpjabbers:hotel booking system
- CVE-2023-51300 Cross-site scripting in phpjabbers:hotel booking system
- CVE-2023-5130 Delta Electronics WPLSoft Buffer-Overflow
- CVE-2023-51299 Cross-site scripting in phpjabbers:hotel booking system
- CVE-2023-51298 Code injection in phpjabbers:event booking calendar
- CVE-2023-51297 Denial of service in phpjabbers:hotel booking system
- CVE-2023-51296 Cross-site scripting in phpjabbers:event booking calendar
- CVE-2023-51295 Cross-site scripting in phpjabbers:event booking calendar
- CVE-2023-51293 Denial of service in phpjabbers:event booking calendar
- CVE-2023-51282 Code injection in mingSoft MCMS
- CVE-2023-51281 Cross-site scripting in oretnom23:customer support system
- CVE-2023-5128 TCD Google Maps <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51277 Misconfiguration in tinowagner:jupyter notebook viewer
- CVE-2023-5127 WP Font Awesome <= 1.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5126 Delete Me <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51258 Denial of service in tortall:yasm
- CVE-2023-51257 Memory corruption in jasper project:jasper
- CVE-2023-51254 Cross-site scripting in jfinalcms project:jfinalcms
- CVE-2023-51252 Cross-site scripting in publiccms:publiccms
- CVE-2023-5125 Contact Form by FormGet <= 5.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51246 Cross-site scripting in get-simple:getsimplecms
- CVE-2023-5124 PageLayer < 1.8.0 - Author+ Stored XSS
- CVE-2023-51232 Dagster vulnerable to Path Traversal attack through its /logs endpoint
- CVE-2023-5123 Improper Path Sanitization in JSON Datasource Plugin
- CVE-2023-5122 SSRF in CSV Datasource Plugin
- CVE-2023-51219 A deep link validation issue in KakaoTalk 10.4.3 allowed a remote adversary to direct users to run any attacker-controlled JavaScript within a WebView.
- CVE-2023-51217 Command injection in tenhot:tws-200 firmware
- CVE-2023-51210 SQL injection in webkul:bundle product
- CVE-2023-5121 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-5120 Migration, Backup, Staging – WPvivid <= 0.9.89 - Authenticated Stored Cross-Site Scripting
- CVE-2023-5119 Forminator and Forminator Pro < 1.27.0 - Admin+ Stored Cross-Site Scripting
- CVE-2023-5118 Stored cross-site scripting vulnerability in Kofax Capture software
- CVE-2023-5117 Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2023-5116 Live updates from Excel <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51157 Cross-site scripting in zkteco:wdms
- CVE-2023-51154 Path traversal in jizhicms:jizhicms
- CVE-2023-5115 Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files
- CVE-2023-51148 Memory corruption in trendnet:tew-821dap firmware
- CVE-2023-51147 Memory corruption in trendnet:tew-821dap firmware
- CVE-2023-51146 Memory corruption in trendnet:tew-821dap firmware
- CVE-2023-51142 Information disclosure in zkteco:biotime
- CVE-2023-51141 Information disclosure in zkteco:biotime
- CVE-2023-5114 idbbee <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51136 Memory corruption in totolink:x2000r firmware
- CVE-2023-51135 Memory corruption in totolink:x2000r firmware
- CVE-2023-51133 Memory corruption in totolink:x2000r firmware
- CVE-2023-5113 Cross-site scripting in Certain HP Enterprise LaserJet, LaserJet Managed printers
- CVE-2023-51127 Path traversal in flir:flir ax8 firmware
- CVE-2023-51126 Command injection in flir:flir ax8 firmware
- CVE-2023-51123 Command injection in dlink:dir-815 firmware
- CVE-2023-5112 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-5111 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-51107 Denial of service in artifex:mupdf
- CVE-2023-51106 Denial of service in artifex:mupdf
- CVE-2023-51105 Denial of service in artifex:mupdf
- CVE-2023-51104 Denial of service in artifex:mupdf
- CVE-2023-51103 Denial of service in artifex:mupdf
- CVE-2023-51102 Memory corruption in tenda:w9 firmware
- CVE-2023-51101 Memory corruption in tenda:w9 firmware
- CVE-2023-51100 Command injection in tenda:w9 firmware
- CVE-2023-5110 BSK PDF Manager <= 3.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-51099 Command injection in tenda:w9 firmware
- CVE-2023-51098 Command injection in tenda:w9 firmware
- CVE-2023-51097 Memory corruption in tenda:w9 firmware
- CVE-2023-51095 Memory corruption in tenda:m3 firmware
- CVE-2023-51094 Command injection in tenda:m3 firmware
- CVE-2023-51093 Memory corruption in tenda:m3 firmware
- CVE-2023-51092 Memory corruption in tenda:m3 firmware
- CVE-2023-51091 Memory corruption in tenda:m3 firmware
- CVE-2023-51090 Memory corruption in tenda:m3 firmware
- CVE-2023-5109 Cross-site scripting in WP Mailto Links – Protect Email Addresses