Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 182 of 430.
- CVE-2023-4938 BEAR <= 1.1.3.3 - Missing Authorization to Product Manipulation
- CVE-2023-49379 Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save
- CVE-2023-49378 Cross-Site Request Forgery in JFinalCMS via /admin/form/save
- CVE-2023-49377 Cross-Site Request Forgery in JFinalCMS via /admin/tag/update
- CVE-2023-49376 Cross-Site Request Forgery in JFinalCMS
- CVE-2023-49375 Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update
- CVE-2023-49374 Cross-Site Request Forgery in JFinalCMS via /admin/slide/update
- CVE-2023-49373 Cross-Site Request Forgery in JFinalCMS
- CVE-2023-49372 Cross-Site Request Forgery in JFinalCMS
- CVE-2023-49371 RuoYi vulnerable to SQL injection vulnerability
- CVE-2023-4937 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation
- CVE-2023-49367 An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information via inspecting sent packages by user.
- CVE-2023-49363 SQL injection in rockoa:rockoa
- CVE-2023-4936 Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading
- CVE-2023-49356 Memory corruption in glensawyer:mp3gain
- CVE-2023-49355 Memory corruption in jqlang:jq
- CVE-2023-49351 Memory corruption in edimax:br-6478ac firmware
- CVE-2023-4935 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Profile Creation
- CVE-2023-49347 Information disclosure in Budgie Extras
- CVE-2023-49346 Other in Budgie Extras
- CVE-2023-49345 Other in Budgie Extras
- CVE-2023-49344 Information disclosure in Budgie Extras
- CVE-2023-49343 Other in Budgie Extras
- CVE-2023-49342 Other in Budgie Extras
- CVE-2023-49341 An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to obtain sensitive
- CVE-2023-49340 An issue was discovered in Newland Nquire 1000 Interactive Kiosk version NQ1000-II_G_V1.00.011, allows remote attackers to escalate privileg
- CVE-2023-4934 IDOR in Usta AYBS
- CVE-2023-49339 Missing authorization in ellucian:banner
- CVE-2023-49338 Missing authorization in couchbase:couchbase server
- CVE-2023-49337 Concrete CMS Stored XSS
- CVE-2023-49335 SQL injection in ADAudit Plus
- CVE-2023-49334 SQL injection in ADAudit Plus
- CVE-2023-49333 SQL injection in ADAudit Plus
- CVE-2023-49332 SQL injection in ADAudit Plus
- CVE-2023-49331 SQL injection in ADAudit Plus
- CVE-2023-49330 SQL injection in ADAudit Plus
- CVE-2023-4933 WP Job Openings < 3.4.3 - Sensitive Data Exposure via Directory Listing
- CVE-2023-49329 Command injection in anomali:match
- CVE-2023-49328 Command injection in wolterskluwer:b.point
- CVE-2023-49322 Denial of service in f-secure:atlant
- CVE-2023-49321 Denial of service in f-secure:atlant
- CVE-2023-4932 Reflected Cross-Site Scripting in SAS 9.4
- CVE-2023-49316 Phpseclib needs guardrails on large binaryfield integers
- CVE-2023-49314 Code injection in asana:desktop
- CVE-2023-49313 Code injection in horsicq:xmachoviewer
- CVE-2023-49312 Security feature bypass in precisionbridge:precision bridge
- CVE-2023-4931 Uncontrolled search path element vulnerability in Plesk
- CVE-2023-4930 Front End PM < 11.4.3 - Sensitive Data Exposure via Directory Listing
- CVE-2023-49299 Apache DolphinScheduler: Arbitrary js execute as root for authenticated users
- CVE-2023-49298 Security feature bypass in openzfs:openzfs
- CVE-2023-49297 Unsafe YAML deserialization in PyDrive2
- CVE-2023-49296 Arduino Create Agent vulnerable to Reflected Cross-Site Scripting
- CVE-2023-49295 quic-go's path validation mechanism can cause denial of service
- CVE-2023-49294 Asterisk Path Traversal vulnerability
- CVE-2023-49293 Cross-site Scripting in `server.transformIndexHtml` via URL payload in vite
- CVE-2023-49292 Possible private key restoration in go package github.com/ecies/go
- CVE-2023-49291 Improper Sanitization of Branch Name Leads to Arbitrary Code Injection
- CVE-2023-49290 Malicious parameters can cause a denial of service in lestrrat-go/jwx
- CVE-2023-4929 NPort 5000 Series Firmware Improper Validation of Integrity Check Vulnerability
- CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional
- CVE-2023-49288 Denial of Service in HTTP Collapsed Forwarding in Squid
- CVE-2023-49287 Buffer overflow vulnerabilities in tinydir
- CVE-2023-49286 Denial of Service in Helper Process management
- CVE-2023-49285 Denial of Service in HTTP Message Processing in Squid
- CVE-2023-49284 Command substitution output can trigger shell expansion in fish shell
- CVE-2023-49283 Test code in published microsoft-graph-core package exposes phpinfo()
- CVE-2023-49282 Test code in published microsoft-graph package exposes phpinfo()
- CVE-2023-49281 Open Redirect in Login Function of Calendarinho
- CVE-2023-49280 Data leak of password hash through xwiki change request
- CVE-2023-4928 SQL Injection in instantsoft/icms2
- CVE-2023-49279 Umbraco CMS vulnerable to stored XSS via SVG File Upload
- CVE-2023-49278 Umbraco CMS brute force exploit can be used to collect valid usernames
- CVE-2023-49277 Reflected Cross-site Scripting Vulnerability in dpaste
- CVE-2023-49276 Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma
- CVE-2023-49275 Wazuh vulnerable to NULL Pointer Dereference in wazuh-analysisd
- CVE-2023-49274 Umbraco CMS SMTP misconfiguration exposes potential registered user email
- CVE-2023-49273 Umbraco CMS vulnerable to Privilege Escalation using Spoofing
- CVE-2023-49272 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
- CVE-2023-49271 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
- CVE-2023-49270 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
- CVE-2023-49269 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)
- CVE-2023-49262 Buffer overflow vulnerability in Cookie authentication field
- CVE-2023-49261 Sensitive authentication-related value accessible publicly
- CVE-2023-49260 Stored cross-site scripting vulnerability
- CVE-2023-4926 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
- CVE-2023-49259 Bruteforcing authentication cookie for a given user
- CVE-2023-49258 Reflected cross-site scripting vulnerability
- CVE-2023-49257 Command execution using the certificate upload utility
- CVE-2023-49256 Predictable encryption passphrase used in publicly accessible configuration file
- CVE-2023-49255 Router console accessible without authentication
- CVE-2023-49254 Command injection in the network test tools
- CVE-2023-49253 Predefined root password
- CVE-2023-49252 Missing authorization in SIMATIC CN 4100
- CVE-2023-49251 Auth bypass in SIMATIC CN 4100
- CVE-2023-49250 Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil
- CVE-2023-4925 Easy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site Scripting
- CVE-2023-49248 Missing authorization in EMUI
- CVE-2023-49247 Security feature bypass in EMUI
- CVE-2023-49246 Missing authorization in EMUI
- CVE-2023-49245 Missing authorization in EMUI