Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 184 of 430.
- CVE-2023-49135 multimedia player has a UAF vulnerability
- CVE-2023-49134 Command injection in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49133 Command injection in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49132 Memory corruption in Solid Edge SE2023
- CVE-2023-49131 Memory corruption in Solid Edge SE2023
- CVE-2023-49130 Memory corruption in Solid Edge SE2023
- CVE-2023-4913 Cross-site Scripting (XSS) - Reflected in cecilapp/cecil
- CVE-2023-49129 Memory corruption in Solid Edge SE2023
- CVE-2023-49128 Memory corruption in Solid Edge SE2023
- CVE-2023-49127 Memory corruption in Solid Edge SE2023
- CVE-2023-49126 Memory corruption in Solid Edge SE2023
- CVE-2023-49125 Memory corruption in Parasolid V35.0
- CVE-2023-49124 Memory corruption in Solid Edge SE2023
- CVE-2023-49123 Memory corruption in Solid Edge SE2023
- CVE-2023-49122 Memory corruption in Solid Edge SE2023
- CVE-2023-49121 Memory corruption in Solid Edge SE2023
- CVE-2023-4912 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-49119 Cross-site scripting in GROWI
- CVE-2023-49118 Dsoftbus has an out-of-bounds read vulnerability
- CVE-2023-49117 Cross-site scripting in PowerCMS (PowerCMS 4 Series)
- CVE-2023-49115 MachineSense FeverWarn Missing Authentication for Critical Function
- CVE-2023-49114 Local Privilege Escalation via DLL Hijacking
- CVE-2023-49113 Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer
- CVE-2023-49112 Insecure Direct Object Reference in Kiuwan SAST
- CVE-2023-49111 Reflected Cross-Site-Scripting in Kiuwan SAST
- CVE-2023-49110 XML External Entity Injection in Kiuwan SAST
- CVE-2023-4911 GNU C Library Buffer Overflow
- CVE-2023-49109 Remote Code Execution in Apache Dolphinscheduler
- CVE-2023-49108 Path traversal in RakRak Document Plus
- CVE-2023-49107 Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager
- CVE-2023-49106 Missing Password Field Masking Vulnerability in Hitachi Device Manager
- CVE-2023-49105 ownCloud Improper Authentication
- CVE-2023-49104 Open redirect in owncloud:oauth2
- CVE-2023-49103 ownCloud graphapi Information Disclosure
- CVE-2023-49102 Command injection in nzbget:nzbget
- CVE-2023-49101 Cross-site scripting in axigen:axigen mobile webmail
- CVE-2023-49100 Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service.
- CVE-2023-4910 3scale-admin-portal: logged out users tokens can be accessed
- CVE-2023-49099 Discourse secure uploads accessible to guests even when login is required
- CVE-2023-49098 Reaction data for user notifications exposed in Discourse-reactions
- CVE-2023-49097 ZITADEL vulnerable account takeover via malicious host header injection
- CVE-2023-49096 Argument Injection in FFmpeg codec parameters in Jellyfin
- CVE-2023-49095 nexkey allows arbitrary users to impersonate any remote user due to missing signature validation
- CVE-2023-49094 Symbolicator Server Side Request Forgery vulnerability
- CVE-2023-49093 HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
- CVE-2023-49092 RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels
- CVE-2023-49091 Jwttoken in Cosmos server never expires after password changed and logging out
- CVE-2023-49090 CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS
- CVE-2023-4909 Security feature bypass in Chrome
- CVE-2023-49089 Umbraco CMS possible path traversal when creating packages from backoffice
- CVE-2023-49088 Cacti has incomplete fix for CVE-2023-39515
- CVE-2023-49087 Validation of SignedInfo
- CVE-2023-49086 Cacti is vulnerable to cross-Site scripting (XSS) DOM
- CVE-2023-49085 Cacti SQL Injection vulnerability
- CVE-2023-49084 Local File Inclusion (RCE) in Cacti
- CVE-2023-49083 cryptography vulnerable to NULL-dereference when loading PKCS7 certificates
- CVE-2023-49082 aiohttp's ClientSession is vulnerable to CRLF injection via method
- CVE-2023-49081 aiohttp's ClientSession is vulnerable to CRLF injection via version
- CVE-2023-49080 Jupyter Server errors include tracebacks with path information
- CVE-2023-4908 Security feature bypass in Chrome
- CVE-2023-49079 Misskey's missing signature validation allows arbitrary users to impersonate any remote user.
- CVE-2023-49078 Cross-Site Scripting vulnerability in raptor-web 0.4.4
- CVE-2023-49077 mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation
- CVE-2023-49076 Pimcore missing token/header to prevent CSRF
- CVE-2023-49075 Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
- CVE-2023-49074 Denial of service in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49073 Memory corruption in WBR-6013
- CVE-2023-49070 Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present
- CVE-2023-4907 Security feature bypass in Chrome
- CVE-2023-49069 Information disclosure in Mendix Runtime V10
- CVE-2023-49068 Apache DolphinScheduler: Information Leakage Vulnerability
- CVE-2023-49062 Information disclosure in Katran
- CVE-2023-49061 Cross-site scripting in Firefox for iOS
- CVE-2023-49060 Information disclosure in Firefox for iOS
- CVE-2023-4906 Security feature bypass in Chrome
- CVE-2023-49058 Directory Traversal vulnerability in SAP Master Data Governance
- CVE-2023-49052 Microweber file upload vulnerability
- CVE-2023-4905 Security feature bypass in Chrome
- CVE-2023-49047 Memory corruption in tenda:ax1803 firmware
- CVE-2023-49046 Memory corruption in tenda:ax1803 firmware
- CVE-2023-49044 Memory corruption in tenda:ax1803 firmware
- CVE-2023-49043 Memory corruption in tenda:ax1803 firmware
- CVE-2023-49042 Memory corruption in tenda:ax1803 firmware
- CVE-2023-49040 Command injection in tenda:ax1803 firmware
- CVE-2023-4904 Security feature bypass in Chrome
- CVE-2023-49038 Command injection in buffalo:ls210d firmware
- CVE-2023-49034 Cross-site scripting in projeqtor:projeqtor
- CVE-2023-49032 Business logic in ltb-project:self service password
- CVE-2023-49031 Path traversal in oneadvanced:tikit emarketing
- CVE-2023-49030 SQL injection in 32ns:klive
- CVE-2023-4903 Security feature bypass in Chrome
- CVE-2023-49029 Cross-site scripting in smpn1smg:absis
- CVE-2023-49028 Cross-site scripting in absis:absis
- CVE-2023-4902 Security feature bypass in Chrome
- CVE-2023-4901 Security feature bypass in Chrome
- CVE-2023-49007 Memory corruption in netgear:rbr750 firmware
- CVE-2023-49006 Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-49004 Code injection in dlink:dir-850l firmware
- CVE-2023-49003 Missing authorization in simplemobiletools:simple dialer
- CVE-2023-49002 Missing authorization in xenomtechnologies:phone dialer-voice call dialer