Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 177 of 430.
- CVE-2023-5016 spider-flow API DataSourceController.java DriverManager.getConnection deserialization
- CVE-2023-50159 Security feature bypass in scalefusion:scalefusion
- CVE-2023-5015 UCMS cross site scripting
- CVE-2023-50147 Command injection in totolink:a3700r firmware
- CVE-2023-5014 Sakshi2610 Food Ordering Website categoryfood.php sql injection
- CVE-2023-50137 Cross-site Scripting in JFinalcms
- CVE-2023-50136 Cross-site scripting in jfinalcms project:jfinalcms
- CVE-2023-5013 Pluck CMS Installation install.php cross site scripting
- CVE-2023-50129 Weak cryptography in flient:smart lock advanced firmware
- CVE-2023-50128 Auth bypass in hozard:alarm system
- CVE-2023-50127 Auth bypass in hozard:alarm system
- CVE-2023-50126 Weak cryptography in hozard:alarm system
- CVE-2023-50125 Hardcoded credentials in hozard:alarm system
- CVE-2023-50124 Hardcoded credentials in flient:smart lock advanced firmware
- CVE-2023-50123 Auth bypass in hozard:alarm system
- CVE-2023-50121 Denial of service in autelrobotics:evo nano drone firmware
- CVE-2023-50120 Denial of service in gpac:gpac
- CVE-2023-5012 Topaz OFD Protection Module Warsaw core.exe unquoted search path
- CVE-2023-50110 Auth bypass in testlink:testlink
- CVE-2023-5011 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-50104 File upload in zzcms:zzcms
- CVE-2023-50102 Cross-site Scripting in JFinalcms
- CVE-2023-50101 Cross-site Scripting in JFinalcms
- CVE-2023-50100 Cross-site Scripting in JFinalcms
- CVE-2023-5010 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-50096 Memory corruption in st:x-cube-safea1
- CVE-2023-50094 Command injection in yogeshojha:rengine
- CVE-2023-50093 Other in apiida:api gateway manager
- CVE-2023-50092 Cross-site scripting in apiida:api gateway manager
- CVE-2023-50090 Path traversal in ureport2 project:ureport2
- CVE-2023-5009 Incorrect Authorization in GitLab
- CVE-2023-50089 Command injection in netgear:wnr2000 firmware
- CVE-2023-50082 Auth bypass in pbootcms:pbootcms
- CVE-2023-5008 Student Information System v1.0 - Unauthenticated SQL Injection
- CVE-2023-50073 SQL injection in leadscloud:empirecms
- CVE-2023-50072 Cross-site scripting in openkm:openkm
- CVE-2023-50071 SQL injection in customer support system project:customer support system
- CVE-2023-50070 SQL injection in oretnom23:customer support system
- CVE-2023-5007 Student Information System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-50069 Cross-site scripting in wiremock:wiremock
- CVE-2023-50061 SQL injection in store-opart:op\'art easy redirect
- CVE-2023-5006 WP Discord Invite < 2.5.1 - Arbitrary Settings Update via CSRF
- CVE-2023-50059 An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galx
- CVE-2023-50053 An issue in Foundation.app Foundation platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication proc
- CVE-2023-5005 Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site Scripting
- CVE-2023-50044 Memory corruption in cesanta:mjs
- CVE-2023-5004 Hospital-management-system-in-php 378c157 - Blind SQL Injection
- CVE-2023-50038 File upload in textpattern:textpattern
- CVE-2023-50035 SQL injection in small crm project:small crm
- CVE-2023-50030 SQL injection in joommasters:jmssetting
- CVE-2023-5003 Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure
- CVE-2023-50029 PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers
- CVE-2023-50028 SQL injection in prestashopmodules:sliding cart block
- CVE-2023-50027 SQL injection in buy-addons:bazoom magnifier
- CVE-2023-50026 SQL injection in prestamonster:multi accessories pro
- CVE-2023-50020 Denial of service in open5gs:open5gs
- CVE-2023-5002 Pgadmin4: remote code execution by an authenticated user
- CVE-2023-50019 Denial of service in open5gs:open5gs
- CVE-2023-50017 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-50015 An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect ac
- CVE-2023-50011 Command injection in popojicms:popojicms
- CVE-2023-50010 Memory corruption in fedoraproject:fedora
- CVE-2023-5001 Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-50009 Memory corruption in fedoraproject:fedora
- CVE-2023-50008 Denial of service in fedoraproject:fedora
- CVE-2023-50007 Memory corruption in fedoraproject:fedora
- CVE-2023-50002 Memory corruption in tenda:w30e firmware
- CVE-2023-50001 Memory corruption in tenda:w30e firmware
- CVE-2023-50000 Memory corruption in tenda:w30e firmware
- CVE-2023-5000 Horizontal scrolling announcements <= 2.4 - Authenticated (Contributor+) SQL Injection via Shortcode
- CVE-2023-49999 Command injection in tenda:w30e firmware
- CVE-2023-49994 Denial of service in espeak-ng:espeak-ng
- CVE-2023-49993 Memory corruption in espeak-ng:espeak-ng
- CVE-2023-49992 Memory corruption in espeak-ng:espeak-ng
- CVE-2023-49991 Memory corruption in espeak-ng:espeak-ng
- CVE-2023-49990 Memory corruption in espeak-ng:espeak-ng
- CVE-2023-4999 Horizontal scrolling announcement <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
- CVE-2023-49989 SQL injection in pratham-jaiswal:hotel booking management system
- CVE-2023-49988 SQL injection in pratham-jaiswal:hotel booking management system
- CVE-2023-49987 Cross-site scripting in oretnom23:school fees management system
- CVE-2023-49986 Cross-site scripting in oretnom23:school fees management system
- CVE-2023-49985 Cross-site scripting in oretnom23:school fees management system
- CVE-2023-49984 Cross-site scripting in oretnom23:school fees management system
- CVE-2023-49983 Cross-site scripting in oretnom23:school fees management system
- CVE-2023-49982 Missing authorization in oretnom23:school fees management system
- CVE-2023-49981 Information disclosure in oretnom23:school fees management system
- CVE-2023-49980 Information disclosure in mayurik:best student result management system
- CVE-2023-49979 Information disclosure in mayurik:best student management system
- CVE-2023-49978 Missing authorization in oretnom23:customer support system
- CVE-2023-49977 Cross-site scripting in oretnom23:customer support system
- CVE-2023-49976 Cross-site scripting in oretnom23:customer support system
- CVE-2023-49974 Cross-site scripting in oretnom23:customer support system
- CVE-2023-49973 Cross-site scripting in oretnom23:customer support system
- CVE-2023-49971 Cross-site scripting in oretnom23:customer support system
- CVE-2023-49970 SQL injection in oretnom23:customer support system
- CVE-2023-4997 Improper authorisation in Uptime DC
- CVE-2023-49969 SQL injection in oretnom23:customer support system
- CVE-2023-49968 SQL injection in oretnom23:customer support system
- CVE-2023-49967 Denial of service in typecho:typecho
- CVE-2023-49965 SpaceX Starlink Wi-Fi router Gen 2 before 2023.48.0 allows XSS via the ssid and password parameters on the Setup Page.