Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 174 of 430.
- CVE-2023-50710 Hono's named path parameters can be overridden in TrieRouter
- CVE-2023-5071 Sitekit <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sitekit_iframe' shortcode
- CVE-2023-50709 Denial of service attack on the cube-api endpoint
- CVE-2023-50708 yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
- CVE-2023-50707 Uncontrolled Resource Consumption in EFACEC BCU 500
- CVE-2023-50706 Improper Access Control in EFACEC UC 500E
- CVE-2023-50705 Exposure of Sensitive Information to an Unauthorized Actor in EFACEC UC 500E
- CVE-2023-50704 URL Redirection to Untrusted Site ('Open Redirect') in EFACEC UC 500E
- CVE-2023-50703 Cleartext Transmission of Sensitive Information in EFACEC UC 500E
- CVE-2023-50702 Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged u
- CVE-2023-50700 Insecure Permissions vulnerability in Deepin dde-file-manager 6.0.54 and earlier allows privileged operations to be called by unprivileged u
- CVE-2023-5070 Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
- CVE-2023-50694 Other in dom96:httpbeast
- CVE-2023-50693 Other in jester project:jester
- CVE-2023-50692 File upload in jizhicms:jizhicms
- CVE-2023-50685 An issue in Hipcam Cameras RealServer v.1.0 allows a remote attacker to cause a denial of service via a crafted script to the client_port parameter.
- CVE-2023-5068 Delta Electronics DIAScreen Out-of-bounds Write
- CVE-2023-50677 Privilege escalation in netgear:dgnd4000 firmware
- CVE-2023-50671 Memory corruption in aertherwide:exiftags
- CVE-2023-50658 jose2go vulnerable to denial of service via large p2c value
- CVE-2023-50651 Command injection in totolink:x6000r firmware
- CVE-2023-50643 Code injection in evernote:evernote
- CVE-2023-50639 Cross-site scripting in iscute:cute http file server
- CVE-2023-50630 Cross-site scripting in teamwork management system project:teamwork management system
- CVE-2023-5063 Widget Responsive for Youtube <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50628 Memory corruption in libming:libming
- CVE-2023-5062 WordPress Charts <= 0.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50614 Information disclosure in cdebyte:e880-ir01 firmware
- CVE-2023-50612 Privilege escalation in fit2cloud:cloudexplorer lite
- CVE-2023-5061 Missing Authorization in GitLab
- CVE-2023-50609 Cross-site scripting in ava:teaching video application service platform
- CVE-2023-5060 Cross-site Scripting (XSS) - DOM in librenms/librenms
- CVE-2023-5059 Santesoft Sante FFT Imaging Out-of-bounds Read
- CVE-2023-50589 SQL injection in embras:geosiap erp
- CVE-2023-50585 Memory corruption in tenda:a18 firmware
- CVE-2023-5058 Other in SecureCore™ Technology™ 4
- CVE-2023-50578 Mingsoft MCMS SQL injection
- CVE-2023-50572 JLine vulnerable to out of memory error
- CVE-2023-50571 easy-rules-mvel vulnerable to remote code execution
- CVE-2023-50570 Denial of service in seancfoley:ipaddress
- CVE-2023-5057 ActivityPub for WordPress < 1.0.0 - Contributor+ Stored XSS
- CVE-2023-50566 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-50565 Cross-site scripting in rpcms:rpcms
- CVE-2023-50564 File upload in pluck-cms:pluck
- CVE-2023-50563 SQL injection in sem-cms:semcms
- CVE-2023-5056 Skupper-operator: privelege escalation via config map
- CVE-2023-50559 Information disclosure in openxiangshan:xiangshan
- CVE-2023-50550 Layui cross-site scripting (XSS) vulnerability
- CVE-2023-5055 L2CAP: Possible Stack based buffer overflow in le_ecred_reconf_req()
- CVE-2023-5054 Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
- CVE-2023-5053 SQL Injection in hospital-management-system-in-php 378c157 in index.php
- CVE-2023-5052 Cross Site Scripting (XSS) in Servidor Uniforme Zero
- CVE-2023-5051 CallRail Phone Call Tracking <= 0.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5050 Leaflet Map <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50495 Memory corruption in invisible-island:ncurse
- CVE-2023-5049 Cross-site scripting in Giveaways and Contests by RafflePress – Get More Website Traffic, Email Subscribers, and Social Followers
- CVE-2023-50488 Code injection in blurams:lumi security camera a31c firmware
- CVE-2023-50481 blinksocks has weak encryption algorithms
- CVE-2023-5048 WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50477 Privilege escalation in nos:nos client
- CVE-2023-50475 bsock uses weak hashing algorithms
- CVE-2023-50473 Cross-site scripting in billahmed:qbit matui
- CVE-2023-50472 Null dereference in davegamble:cjson
- CVE-2023-50471 Null dereference in davegamble:cjson
- CVE-2023-50470 Cross-site scripting in seacms:seacms
- CVE-2023-5047 SQLi in DRDrive
- CVE-2023-50469 Memory corruption in szlbt:lbt-t300-t310 firmware
- CVE-2023-50466 Command injection in weintek:cmt2078x firmware
- CVE-2023-50465 Cross-site scripting in monicahq:monica
- CVE-2023-50463 Header spoofing in caddy-geo-ip
- CVE-2023-50462 Insecure Direct Object Reference in extension "Content Consent" (content_consent)
- CVE-2023-50461 Configuration Injection in extension "Direct Mail" (direct_mail)
- CVE-2023-50460 Missing authorization in femanager
- CVE-2023-5046 SQLi in Biltay's Procost
- CVE-2023-50459 Broken Access Control in extension "femanager"
- CVE-2023-50458 Information disclosure in Dradis
- CVE-2023-50457 Missing authorization in zammad:zammad
- CVE-2023-50456 Open redirect in zammad:zammad
- CVE-2023-50455 Denial of service in zammad:zammad
- CVE-2023-50454 Weak cryptography in zammad:zammad
- CVE-2023-50453 Information disclosure in zammad:zammad
- CVE-2023-50450 Privilege escalation in sensopart:visor vision sensors firmware
- CVE-2023-5045 SQLi in Biltay's Kayısı
- CVE-2023-50449 Directory Traversal in JFinalCMS
- CVE-2023-50448 Potential CSV export data leak
- CVE-2023-50447 Arbitrary Code Execution in Pillow
- CVE-2023-50446 Privilege escalation in mullvad:mullvad vpn
- CVE-2023-50445 Command injection in gl-inet:gl-a1300 firmware
- CVE-2023-50444 Weak cryptography in primx:zed\!
- CVE-2023-50443 Other in primx:cryhod
- CVE-2023-50442 Security feature bypass in primx:zonecentral
- CVE-2023-50441 Other in primx:zonecentral
- CVE-2023-50440 Other in primx:zed\!
- CVE-2023-5044 Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation
- CVE-2023-50439 Information disclosure in primx:zed\!
- CVE-2023-50437 Information disclosure in couchbase:couchbase server
- CVE-2023-50436 Information disclosure in couchbase:couchbase server
- CVE-2023-50434 emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read.
- CVE-2023-50433 marshall in dhcp_packet.c in simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service by sending a malicious DHCP packet.
- CVE-2023-50432 simple-dhcp-server through ec976d2 allows remote attackers to cause a denial of service (daemon crash) by sending a DHCP packet without any