Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 185 of 430.
- CVE-2023-49001 Code injection in indibrowser:indi browser
- CVE-2023-49000 Security feature bypass in artistscope:artisbrowser
- CVE-2023-4900 Security feature bypass in Chrome
- CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm
- CVE-2023-48987 SQL injection in cusg:content management system
- CVE-2023-48986 Cross-site scripting in cusg:content management system
- CVE-2023-48985 Cross-site scripting in cusg:content management system
- CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm
- CVE-2023-48978 Code injection in ncr:itm web terminal
- CVE-2023-48974 Cross-site scripting in axigen:axigen mail server
- CVE-2023-4897 Relative Path Traversal in mintplex-labs/anything-llm
- CVE-2023-48967 Solon is vulnerable to Deserialization of Untrusted Data
- CVE-2023-48966 ThinkAdmin arbitrary file upload vulnerability
- CVE-2023-48965 File upload in thinkadmin:thinkadmin
- CVE-2023-48964 Memory corruption in tenda:i6 firmware
- CVE-2023-48963 Memory corruption in tenda:i6 firmware
- CVE-2023-4896 Authenticated Disclosure of Sensitive Information in AirWave Management Platform
- CVE-2023-48958 Denial of service in gpac:gpac
- CVE-2023-48957 Information disclosure in purevpn:purevpn
- CVE-2023-48952 Denial of service in openlinksw:virtuoso
- CVE-2023-48951 Denial of service in openlinksw:virtuoso
- CVE-2023-48950 Denial of service in openlinksw:virtuoso
- CVE-2023-4895 Missing Authorization in GitLab
- CVE-2023-48949 Denial of service in openlinksw:virtuoso
- CVE-2023-48948 Denial of service in openlinksw:virtuoso
- CVE-2023-48947 Denial of service in openlinksw:virtuoso
- CVE-2023-48946 Denial of service in openlinksw:virtuoso
- CVE-2023-48945 Memory corruption in openlinksw:virtuoso
- CVE-2023-48940 Cross-site scripting in daicuo:daicuo
- CVE-2023-48930 File upload in rockoa:xinhu
- CVE-2023-4893 Crayon Syntax Highlighter <= 2.8.4 - Authenticated (Contributor+) Server Side Request Forgery
- CVE-2023-48929 Auth bypass in franklin-electric:system sentinel anyware
- CVE-2023-48928 Open redirect in franklin-electric:system sentinel anyware
- CVE-2023-48926 Missing authorization in prestashop:advanced loyalty program
- CVE-2023-48925 SQL injection in buy-addons:bavideotab
- CVE-2023-4892 Teedy v1.11 - Stored cross-site scripting (XSS)
- CVE-2023-48914 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48913 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48912 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48910 Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
- CVE-2023-4891 Use after free in Lenovo View Driver
- CVE-2023-48909 Code injection in aarboard:jave2
- CVE-2023-48906 Stack Overflow vulnerability in Btstack 1.6 and earlier allows attackers to cause a denial of service via crafted input to the char_for_nibble function.
- CVE-2023-48903 Cross-site scripting in tramyardg:autoexpress
- CVE-2023-48902 Auth bypass in tramyardg:autoexpress
- CVE-2023-48901 SQL injection in tramyardg:autoexpress
- CVE-2023-4890 JQuery Accordion Menu Widget <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-48894 Missing authorization in huaxiaerp:jsherp
- CVE-2023-48893 SQL injection in slims:senayan library management system bulian
- CVE-2023-4889 Shareaholic <= 9.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-48887 Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
- CVE-2023-48886 Deserialization in luxiaoxun:nettyrpc
- CVE-2023-48882 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-48881 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-48880 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-4888 Simple Like Page Plugin <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-4887 Google Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-48866 Cross-site scripting in grocy project:grocy
- CVE-2023-48865 Reportico affected by Incorrect Access Control
- CVE-2023-48864 SQL injection in sem-cms:semcms
- CVE-2023-48863 SQL injection in sem-cms:semcms
- CVE-2023-48861 Privilege escalation in baidu:ttplayer
- CVE-2023-48860 Missing authorization in totolink:n300rt firmware
- CVE-2023-4886 Foreman: world readable file containing secrets
- CVE-2023-48859 Missing authorization in totolink:a3002ru firmware
- CVE-2023-48858 Cross-site scripting in abocms:abo.cms
- CVE-2023-4885 Multiple vulnerabilities in Open5GS
- CVE-2023-48849 Code injection in ruijie:rg-eg1000c firmware
- CVE-2023-48848 ureport arbitrary file read vulnerability
- CVE-2023-48842 Command injection in dlink:go-rt-ac750 firmware
- CVE-2023-48841 Code injection in phpjabbers:appointment scheduler
- CVE-2023-48840 Denial of service in phpjabbers:appointment scheduler
- CVE-2023-4884 Multiple vulnerabilities in Open5GS
- CVE-2023-48839 Cross-site scripting in phpjabbers:appointment scheduler
- CVE-2023-48838 Cross-site scripting in phpjabbers:appointment scheduler
- CVE-2023-48837 Cross-site scripting in phpjabbers:car rental script
- CVE-2023-48836 Cross-site scripting in phpjabbers:car rental script
- CVE-2023-48835 Code injection in phpjabbers:car rental script
- CVE-2023-48834 Denial of service in phpjabbers:car rental script
- CVE-2023-48833 Denial of service in phpjabbers:time slots booking calendar
- CVE-2023-48831 Denial of service in phpjabbers:availability booking calendar
- CVE-2023-48830 Code injection in phpjabbers:shuttle booking software
- CVE-2023-4883 Multiple vulnerabilities in Open5GS
- CVE-2023-48828 Cross-site scripting in phpjabbers:time slots booking calendar
- CVE-2023-48827 Cross-site scripting in phpjabbers:time slots booking calendar
- CVE-2023-48826 Code injection in phpjabbers:time slots booking calendar
- CVE-2023-48825 Cross-site scripting in phpjabbers:availability booking calendar
- CVE-2023-48824 Cross-site scripting in boidcms:boidcms
- CVE-2023-48823 SQL injection in mayurik:courier management system
- CVE-2023-4882 Multiple vulnerabilities in Open5GS
- CVE-2023-48815 Open redirect in keking:kkfileview
- CVE-2023-48813 SQL injection in slims:senayan library management system bulian
- CVE-2023-48812 Command injection in totolink:x6000r firmware
- CVE-2023-48811 Command injection in totolink:x6000r firmware
- CVE-2023-48810 Command injection in totolink:x6000r firmware
- CVE-2023-48808 Command injection in totolink:x6000r firmware
- CVE-2023-48807 Command injection in totolink:x6000r firmware
- CVE-2023-48806 Command injection in totolink:x6000r firmware
- CVE-2023-48805 Command injection in totolink:x6000r firmware
- CVE-2023-48804 Command injection in totolink:x6000r firmware