Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 175 of 430.
- CVE-2023-50431 Information disclosure in linux:linux kernel
- CVE-2023-50430 Auth bypass in goodix:fingerprint sensor firmware
- CVE-2023-5043 Ingress nginx annotation injection causes arbitrary command execution
- CVE-2023-50429 SQL injection in izybat:orange casiers
- CVE-2023-50428 Security feature bypass in bitcoin:bitcoin core
- CVE-2023-50424 Privilege escalation in github.com/sap/cloud-security-client-go
- CVE-2023-50423 Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec)
- CVE-2023-50422 Privilege escalation in cloud-security-services-integration-library
- CVE-2023-5042 Misconfiguration in Acronis Cyber Protect Home Office
- CVE-2023-5041 Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection
- CVE-2023-50395 SQL Injection Remote Code Execution Vulnerability
- CVE-2023-50387 Denial of service in fedoraproject:fedora
- CVE-2023-50386 Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
- CVE-2023-50383 Command injection in WBR-6013
- CVE-2023-50382 Command injection in WBR-6013
- CVE-2023-50381 Command injection in WBR-6013
- CVE-2023-50380 Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server
- CVE-2023-5038 Unauthenticated DoS
- CVE-2023-50379 Apache Ambari: authenticated users could perform command injection to perform RCE
- CVE-2023-50378 Apache Ambari: Various XSS problems
- CVE-2023-50377 WordPress Simple Counter Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-50376 WordPress Simple Membership Plugin <= 4.3.8 is vulnerable to Unauth. Reflected Cross Site Scripting (XSS)
- CVE-2023-50375 WordPress Translate WordPress – Google Language Translator plugin <= 6.0.19 - Broken Access Control vulnerability
- CVE-2023-50374 Server-side request forgery in CMP – Coming Soon & Maintenance
- CVE-2023-50373 WordPress Alt Manager plugin <= 1.6.1 - Broken Access Control vulnerability
- CVE-2023-50372 WordPress Custom Post Type Page Template Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-50371 WordPress Advanced Page Visit Counter Plugin <= 8.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-50370 WordPress Livemesh Addons for WPBakery Page Builder Plugin <= 3.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-5037 Authenticated Command Injection
- CVE-2023-50369 Cross-site scripting in Alma – Pay in installments or later for WooCommerce
- CVE-2023-50368 WordPress Shortcodes and extra features for Phlox theme Plugin <= 2.15.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-50366 QTS, QuTS hero
- CVE-2023-50364 QTS, QuTS hero
- CVE-2023-50363 QTS, QuTS hero
- CVE-2023-50362 QTS, QuTS hero
- CVE-2023-50361 QTS, QuTS hero
- CVE-2023-50360 Video Station
- CVE-2023-5036 Cross-Site Request Forgery (CSRF) in usememos/memos
- CVE-2023-50359 QTS, QuTS hero
- CVE-2023-50358 QTS, QuTS hero, QuTScloud
- CVE-2023-50357 Cross site scripting vulnerability in AREAL SAS Webserv1 ASP Web Site
- CVE-2023-50356 Improper Certificate Validation in AREAL Topkapi Vision (Server)
- CVE-2023-50355 HCL Sametime is impacted by generation of error messages containing sensitive information
- CVE-2023-50351 Insecure key rotation affects MyXalytics
- CVE-2023-50350 A broken cryptographic algorithm impacts MyXalytics
- CVE-2023-5035 Cookie Without Secure Flag
- CVE-2023-50349 HCL Sametime is impacted by a Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-50348 Improper Error Handling affects DRYiCE MyXalytics
- CVE-2023-50347 Insecure SQL Interface affects HCL DRYiCE MyXalytics
- CVE-2023-50346 An information disclosure affects DRYiCE MyXalytics
- CVE-2023-50345 Open Redirect affects DRYiCE MyXalytics
- CVE-2023-50344 Unauthenticated File Downloads affect DRYiCE MyXalytics
- CVE-2023-50343 Improper Access Control (Controller APIs) affects DRYiCE MyXalytics
- CVE-2023-50342 Insecure Direct Object Reference (IDOR) affects DRYiCE MyXalytics
- CVE-2023-50341 Improper Access Control affects DRYiCE MyXalytics
- CVE-2023-5034 SourceCodester My Food Recipe Image Upload index.php unrestricted upload
- CVE-2023-50339 Cross-site scripting in GROWI
- CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests
- CVE-2023-50332 Missing authorization in GROWI
- CVE-2023-50330 Memory corruption in WBR-6013
- CVE-2023-5033 OpenRapid RapidCMS cate-edit-run.php sql injection
- CVE-2023-50328 IBM PowerSC information disclosure
- CVE-2023-50327 IBM PowerSC weak security
- CVE-2023-50326 IBM PowerSC information Disclosure
- CVE-2023-50324 IBM Cognos Command Center information disclosure
- CVE-2023-5032 OpenRapid RapidCMS article-edit-run.php sql injection
- CVE-2023-50316 IBM Sterling B2B Integrator information disclosure
- CVE-2023-50315 IBM WebSphere Application Server information disclosure
- CVE-2023-50314 IBM WebSphere Application Server Libery information disclosure
- CVE-2023-50313 IBM WebSphere Application Server information disclosure
- CVE-2023-50312 IBM WebSphere Application Server Liberty information disclosure
- CVE-2023-50311 IBM CICS Transaction Gateway for Multiplatforms information disclosure
- CVE-2023-50310 IBM CICS Transaction Gateway for Multiplatforms information disclosure
- CVE-2023-5031 OpenRapid RapidCMS article-add.php sql injection
- CVE-2023-50309 IBM Sterling B2B Integrator cross-site scripting
- CVE-2023-50308 IBM Db2 denial of service
- CVE-2023-50307 IBM Sterling B2B Integrator cross-site scripting
- CVE-2023-50306 IBM Common Licensing information disclosure
- CVE-2023-50305 IBM Engineering Requirements Management information disclosure
- CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection
- CVE-2023-50303 IBM InfoSphere Information Server cross-site scripting
- CVE-2023-50301 IBM Transformation Extender Advanced information disclosure
- CVE-2023-50300 IBM Transformation Extender Advanced improper access control
- CVE-2023-5030 Tongda OA delete.php sql injection
- CVE-2023-50298 Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions
- CVE-2023-50297 Open redirect in PowerCMS (PowerCMS 4 Series)
- CVE-2023-50294 Information disclosure in GROWI
- CVE-2023-50292 Apache Solr: Solr Schema Designer blindly "trusts" all configsets, possibly leading to RCE by unauthenticated users
- CVE-2023-50291 Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords
- CVE-2023-50290 Apache Solr: Host environment variables are published via the Metrics API
- CVE-2023-5029 mccms 1 sql injection
- CVE-2023-5028 China Unicom TEWA-800G debug log file
- CVE-2023-50275 Auth bypass in HPE OneView
- CVE-2023-50274 Command injection in HPE OneView
- CVE-2023-50272 Auth bypass in HPE Integrated Lights-out 5 (iLO 5), HPE Integrated Lights-out 6 (iLO 6),
- CVE-2023-50271 HP-UX System Management Homepage, Disclosure of Information
- CVE-2023-50270 Apache DolphinScheduler: Session do not expire after password change
- CVE-2023-5027 SourceCodester Simple Membership System club_validator.php sql injection
- CVE-2023-50269 SQUID-2023:10 Denial of Service in HTTP Request parsing
- CVE-2023-50268 jq has stack-based buffer overflow in decNaNs