Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 171 of 430.
- CVE-2023-51084 hyavijava stack overflow vulnerability
- CVE-2023-51080 hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
- CVE-2023-5108 Easy Newsletter Signups <= 1.0.4 - Admin+ SQLi
- CVE-2023-51079 mvel2 TimeOut error exists in the ParseTools.subCompileExpression method
- CVE-2023-51075 hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
- CVE-2023-51074 json-path Out-of-bounds Write vulnerability
- CVE-2023-51073 Command injection in buffalo:ls210d firmware
- CVE-2023-51072 Cross-site scripting in nagios:nagios xi
- CVE-2023-51071 Missing authorization in qstar:archive storage manager
- CVE-2023-51070 Missing authorization in qstar:archive storage manager
- CVE-2023-51068 Cross-site scripting in qstar:archive storage manager
- CVE-2023-51067 Cross-site scripting in qstar:archive storage manager
- CVE-2023-51066 Code injection in qstar:archive storage manager
- CVE-2023-51065 Missing authorization in qstar:archive storage manager
- CVE-2023-51064 Cross-site scripting in qstar:archive storage manager
- CVE-2023-51063 Cross-site scripting in qstar:archive storage manager
- CVE-2023-51062 Missing authorization in qstar:archive storage manager
- CVE-2023-5106 Incorrect Authorization in GitLab
- CVE-2023-51059 Privilege escalation in mokosmart:mkgw1 gateway firmware
- CVE-2023-51052 SQL injection in s-cms:s-cms
- CVE-2023-51051 SQL injection in s-cms:s-cms
- CVE-2023-51050 SQL injection in s-cms:s-cms
- CVE-2023-5105 Frontend File Manager < 22.6 - Editor+ Arbitrary File Download
- CVE-2023-51049 SQL injection in s-cms:s-cms
- CVE-2023-51048 SQL injection in s-cms:s-cms
- CVE-2023-51043 Use after free in linux:linux kernel
- CVE-2023-51042 Use after free in linux:linux kernel
- CVE-2023-5104 Improper Input Validation in nocodb/nocodb
- CVE-2023-51035 Command injection in totolink:ex1200l firmware
- CVE-2023-51034 File upload in totolink:ex1200l firmware
- CVE-2023-51033 Command injection in totolink:ex1200l firmware
- CVE-2023-5103 Other in APU0200
- CVE-2023-51028 Command injection in totolink:ex1800t firmware
- CVE-2023-51027 Command injection in totolink:ex1800t firmware
- CVE-2023-51026 Command injection in totolink:ex1800t firmware
- CVE-2023-51025 Command injection in totolink:ex1800t firmware
- CVE-2023-51024 Command injection in totolink:ex1800t firmware
- CVE-2023-51023 Command injection in totolink:ex1800t firmware
- CVE-2023-51022 Command injection in totolink:ex1800t firmware
- CVE-2023-51021 Command injection in totolink:ex1800t firmware
- CVE-2023-51020 Command injection in totolink:ex1800t firmware
- CVE-2023-5102 Security feature bypass in APU0200
- CVE-2023-51019 Command injection in totolink:ex1800t firmware
- CVE-2023-51018 Command injection in totolink:ex1800t firmware
- CVE-2023-51017 Command injection in totolink:ex1800t firmware
- CVE-2023-51016 Command injection in totolink:ex1800t firmware
- CVE-2023-51015 Command injection in totolink:ex1800t firmware
- CVE-2023-51014 Command injection in totolink:ex1800t firmware
- CVE-2023-51013 Command injection in totolink:ex1800t firmware
- CVE-2023-51012 Command injection in totolink:ex1800t firmware
- CVE-2023-51011 Command injection in totolink:ex1800t firmware
- CVE-2023-51010 Open redirect in qd-metro:qingdao metro
- CVE-2023-5101 Information disclosure in APU0200
- CVE-2023-51006 Path traversal in zhwnl:chinese perpetual calendar
- CVE-2023-5100 Information disclosure in APU0200
- CVE-2023-50993 Command injection in ruijie:rg-ws6008 firmware
- CVE-2023-50992 Memory corruption in tenda:i29 firmware
- CVE-2023-50991 Memory corruption in tenda:i29 firmware
- CVE-2023-50990 Memory corruption in tenda:i29 firmware
- CVE-2023-5099 HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- CVE-2023-50989 Command injection in tenda:i29 firmware
- CVE-2023-50988 Memory corruption in tenda:i29 firmware
- CVE-2023-50987 Memory corruption in tenda:i29 firmware
- CVE-2023-50986 Memory corruption in tenda:i29 firmware
- CVE-2023-50985 Memory corruption in tenda:i29 firmware
- CVE-2023-50984 Memory corruption in tenda:i29 firmware
- CVE-2023-50983 Command injection in tenda:i29 firmware
- CVE-2023-50982 File upload in studip:stud.ip
- CVE-2023-50981 Denial of service in cryptopp:crypto\+\+
- CVE-2023-50980 Denial of service in cryptopp:crypto\+\+
- CVE-2023-5098 Campaign Monitor Forms < 2.5.6 - Subscriber+ Arbitrary Options Update
- CVE-2023-50979 Weak cryptography in cryptopp:crypto\+\+
- CVE-2023-50976 Missing authorization in redpanda:redpanda
- CVE-2023-50975 Misconfiguration in td:advanced dashboard
- CVE-2023-50974 Apprite CLI makes Use of Hard-coded Credentials
- CVE-2023-5097 Path traversal in Workforce Access
- CVE-2023-50969 Thales Imperva SecureSphere WAF 14.7.0.40 allows remote attackers to bypass WAF rules via a crafted POST request, a different vulnerability than CVE-2021-45468.
- CVE-2023-50968 Apache OFBiz: Arbitrary file properties reading and SSRF attack
- CVE-2023-50967 Denial of service in fedoraproject:fedora
- CVE-2023-50966 erlang-jose vulnerable to denial of service via large p2c value
- CVE-2023-50965 Memory corruption in starnight:micro http server
- CVE-2023-50964 IBM InfoSphere Information Server cross-site scripting
- CVE-2023-50963 IBM Storage Defender HTTP HOST header injection
- CVE-2023-50962 IBM PowerSC information disclosure
- CVE-2023-50961 IBM QRadar cross-site scripting
- CVE-2023-5096 HTML filter and csv-file search <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50959 IBM Cloud Pak for Business Automation information disclosure
- CVE-2023-50957 IBM Storage Defender - Resiliency Service privilege escalation
- CVE-2023-50956 IBM Storage Defender - Resiliency Service information disclosure
- CVE-2023-50955 IBM InfoSphere Information Server information disclosure
- CVE-2023-50954 IBM InfoSphere Information Server information disclosure
- CVE-2023-50953 IBM InfoSphere Information Server information disclosure
- CVE-2023-50952 IBM InfoSphere Information Server server-side request forgery
- CVE-2023-50951 IBM QRadar Suite information disclosure
- CVE-2023-50950 IBM QRadar information disclosure
- CVE-2023-50949 IBM QRadar improper certificate validation
- CVE-2023-50948 IBM Storage Fusion HCI information disclosure
- CVE-2023-50947 IBM Business Automation Workflow cross-site scripting
- CVE-2023-50946 IBM Common Licensing information disclosure
- CVE-2023-50945 IBM Common Licensing information disclosure