Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 180 of 430.
- CVE-2023-49733 Apache Cocoon's StreamGenerator is vulnerable to XXE injection
- CVE-2023-4973 Academy LMS GET Parameter filter cross site scripting
- CVE-2023-49722 Misconfiguration in BCC101
- CVE-2023-49721 Misconfiguration in LXD
- CVE-2023-4972 Information Disclosure in Digital Yepas
- CVE-2023-49716 Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection
- CVE-2023-49715 File upload in AVideo
- CVE-2023-49713 Denial of service in GC-A22W-CW
- CVE-2023-4971 Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection
- CVE-2023-49708 Extension - joomstar.com - SQLi vulnerability in Starshop component for Joomla 1.0.0-1.0.9
- CVE-2023-49707 Extension - joomlart.com - SQLi vulnerability in S5 Register module for Joomla 1.0.0-3.0.0
- CVE-2023-49706 Race condition in linotp:linotp
- CVE-2023-49701 Out-of-bounds access a buffer in SIM management
- CVE-2023-49700 Buffer Copy Without Checking size of input in IMS
- CVE-2023-4970 PubyDoc <= 2.0.6 - Admin+ Stored XSS
- CVE-2023-49699 Out-of-bounds access a buffer in IMS
- CVE-2023-49695 Command injection in WRC-X3000GS
- CVE-2023-49694 NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server
- CVE-2023-49693 NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
- CVE-2023-49692 Command injection in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-49691 Command injection in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-4969 GPU kernel implementations susceptible to memory leak
- CVE-2023-49689 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49688 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49681 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4968 WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49677 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49676 CODESYS: Use after free vulnerability through corrupted project files
- CVE-2023-49675 CODESYS: Out-of-bounds write through corrupted project files
- CVE-2023-49674 Jenkins NeuVector Vulnerability Scanner Plugin missing permission check
- CVE-2023-49673 Jenkins NeuVector Vulnerability Scanner Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-4967 Denial of service
- CVE-2023-49666 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49665 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow
- CVE-2023-49658 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49657 Apache Superset: Stored XSS in Dashboard Title and Chart Title
- CVE-2023-49656 Jenkins MATLAB Plugin XML External Entity vulnerability
- CVE-2023-49655 Jenkins MATLAB Plugin cross-site request forgery vulnerability
- CVE-2023-49654 Jenkins MATLAB Plugin missing permission checks
- CVE-2023-49653 Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
- CVE-2023-49652 Jenkins Google Compute Engine Plugin has incorrect permission checks
- CVE-2023-4965 phpipam Header redirect
- CVE-2023-49647 Zoom Desktop Client for Windows - Improper Access Control
- CVE-2023-49646 Auth bypass in Zoom Clients
- CVE-2023-49641 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4964 Potential open redirect vulnerability in opentext SMAX and AMX product.
- CVE-2023-49639 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49633 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4963 WS Facebook Like Box Widget <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49625 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49624 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49622 Billing Software v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-49621 Hardcoded credentials in SIMATIC CN 4100
- CVE-2023-49620 Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for
- CVE-2023-4962 Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.
- CVE-2023-49618 Memory corruption in Intel(R) System Security Report and System Resources Defense firmware
- CVE-2023-49617 MachineSense FeverWarn Missing Authentication for Critical Function
- CVE-2023-49615 Privilege escalation in Intel(R) System Security Report and System Resources Defense firmware
- CVE-2023-49614 Memory corruption in Intel(R) FPGA products
- CVE-2023-49610 MachineSense FeverWarn Improper Input Validation
- CVE-2023-4961 Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49607 Playbook plugin crash via missing interface type assertion
- CVE-2023-49606 Use after free in Tinyproxy
- CVE-2023-49603 Race condition in Intel(R) System Security Report and System Resources Defense firmware
- CVE-2023-49602 Arkui has a type confusion vulnerability
- CVE-2023-49600 Memory corruption in libigl
- CVE-2023-4960 WCFM Marketplace <= 3.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49599 WWBN AVideo Insufficient Entropy vulnerbaility
- CVE-2023-49598 Cross-site scripting in GROWI
- CVE-2023-49595 Memory corruption in WBR-6013
- CVE-2023-49594 Information disclosure in DuoUniversalKeycloakAuthenticator
- CVE-2023-49593 Command injection in WBR-6013
- CVE-2023-4959 Quay: cross-site request forgery (csrf) on config-editor page
- CVE-2023-49589 Weak cryptography in AVideo
- CVE-2023-49587 Command Injection vulnerability in SAP Solution Manager
- CVE-2023-49584 Client-Side Desynchronization vulnerability in SAP Fiori Launchpad
- CVE-2023-49583 Escalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)
- CVE-2023-49582 Apache Portable Runtime (APR): Unexpected lax shared memory permissions
- CVE-2023-49581 SQL Injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2023-49580 Information disclosure in SAP GUI for Windows and SAP GUI for Java
- CVE-2023-4958 Stackrox: missing http security headers allows for clickjacking in web ui
- CVE-2023-49578 Denial of service (DOS) in SAP Cloud Connector
- CVE-2023-49577 Cross-Site Scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution)
- CVE-2023-49575 XSS vulnerability in VX Search Enterprise
- CVE-2023-49574 XSS vulnerability in VX Search Enterprise
- CVE-2023-49573 XSS vulnerability in VX Search Enterprise
- CVE-2023-49572 XSS vulnerability in VX Search Enterprise
- CVE-2023-49570 Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)
- CVE-2023-4957 Authentication Bypass on Zebra ZTC
- CVE-2023-49569 Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
- CVE-2023-49568 Maliciously crafted Git server replies can cause DoS on go-git clients
- CVE-2023-49567 Insecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)
- CVE-2023-49566 Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability
- CVE-2023-49565 Remote Code Execution
- CVE-2023-49564 Authentication Bypass
- CVE-2023-49563 Cross-site scripting in voltronicpower:snmp web pro
- CVE-2023-4956 Quay: clickjacking on config-editor page severity
- CVE-2023-49559 gqlparser denial of service vulnerability via the parserDirectives function