Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 192 of 430.
- CVE-2023-4822 Grafana privilege escalation vulnerability
- CVE-2023-48219 Special characters in unescaped text nodes can trigger mXSS in TinyMCE
- CVE-2023-48218 Bypass of field access control in strapi-plugin-protected-populate
- CVE-2023-48217 Remote code execution via form uploads in statamic/cms
- CVE-2023-4821 Drag and Drop Multiple File Upload < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-48208 Cross-site scripting in phpjabbers:availability booking calendar
- CVE-2023-48207 Code injection in phpjabbers:availability booking calendar
- CVE-2023-48206 Cross-site scripting in mayurik:courier management system
- CVE-2023-48205 Other in jorani:leave management system
- CVE-2023-48204 Server-side request forgery in publiccms:publiccms
- CVE-2023-48202 Cross-site scripting in sunlight-cms:sunlight cms
- CVE-2023-48201 Cross-site scripting in sunlight-cms:sunlight cms
- CVE-2023-48200 Cross-site scripting in grocy project:grocy
- CVE-2023-4820 PowerPress Podcasting < 11.0.12 - Contributor+ Stored XSS
- CVE-2023-48199 Cross-site scripting in grocy project:grocy
- CVE-2023-48198 Cross-site scripting in grocy project:grocy
- CVE-2023-48197 Cross-site scripting in grocy project:grocy
- CVE-2023-48194 Memory corruption in tenda:ac8 firmware
- CVE-2023-48193 Security feature bypass in fit2cloud:jumpserver
- CVE-2023-48192 Code injection in totolink:a3700r firmware
- CVE-2023-4819 Shared Files < 1.7.6 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-48188 SQL injection in store-opart:op\'art devis
- CVE-2023-48185 Path traversal in terra-mater:terra-master
- CVE-2023-48184 Use after free in quickjs project:quickjs
- CVE-2023-48183 Null dereference in quickjs project:quickjs
- CVE-2023-4818 Security feature bypass in A920
- CVE-2023-48176 Privilege escalation in mizhexiaoxiao:websiteguide
- CVE-2023-48172 Cross-site scripting in phpjabbers:shuttle booking software
- CVE-2023-48171 Privilege escalation in owasp:defectdojo
- CVE-2023-4817 Unrestricted file upload vulnerability in ICP DAS ET-7060
- CVE-2023-48166 Path traversal in unify:openscape voice
- CVE-2023-48161 Memory corruption in giflib project:giflib
- CVE-2023-4816 Auth bypass in Asset Suite 9
- CVE-2023-4815 Missing Authentication for Critical Function in answerdev/answer
- CVE-2023-4814 Privilege escalation in Data Loss Prevention Endpoint for Windows
- CVE-2023-48135 Information disclosure in linecorp:line
- CVE-2023-48134 Information disclosure in linecorp:line
- CVE-2023-48133 Information disclosure in linecorp:line
- CVE-2023-48132 Information disclosure in linecorp:line
- CVE-2023-48131 Information disclosure in linecorp:line
- CVE-2023-48130 Information disclosure in linecorp:line
- CVE-2023-4813 Glibc: potential use-after-free in gaih_inet()
- CVE-2023-48129 Information disclosure in linecorp:line
- CVE-2023-48128 Information disclosure in linecorp:line
- CVE-2023-48127 Hardcoded credentials in linecorp:line
- CVE-2023-48126 Information disclosure in linecorp:line
- CVE-2023-48124 Cross-site scripting in nayem-howlader:sup online shopping
- CVE-2023-48123 Code injection in netgate:pfsense
- CVE-2023-48122 Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method
- CVE-2023-48121 Auth bypass in ezviz:cs-c3n-a0-3h2wfrl firmware
- CVE-2023-4812 Incorrect Authorization in GitLab
- CVE-2023-48118 SQL injection in quest-analytics:iqcrm
- CVE-2023-48116 Cross-site scripting in smartertools:smartermail
- CVE-2023-48115 Cross-site scripting in smartertools:smartermail
- CVE-2023-48114 Cross-site scripting in smartertools:smartermail
- CVE-2023-48111 Memory corruption in tenda:ax1803 firmware
- CVE-2023-48110 Memory corruption in tenda:ax1803 firmware
- CVE-2023-4811 WordPress File Upload < 4.23.3 - Author+ Stored Cross-Site Scripting
- CVE-2023-48109 Memory corruption in tenda:ax1803 firmware
- CVE-2023-48107 Memory corruption in zlib-ng:minizip-ng
- CVE-2023-48106 Memory corruption in zlib-ng:minizip-ng
- CVE-2023-48105 Memory corruption in bytecodealliance:webassembly micro runtime
- CVE-2023-48104 Cross-site scripting in alinto:sogo
- CVE-2023-4810 Responsive Pricing Table < 5.1.8 - Admin+ Stored Cross-Site Scriping
- CVE-2023-48094 Cross-site scripting in cesium:cesiumjs
- CVE-2023-48090 Denial of service in gpac:gpac
- CVE-2023-4809 pf incorrectly handles multiple IPv6 fragment headers
- CVE-2023-48089 xxl-job-admin vulnerable to Remote Code Execution
- CVE-2023-48088 xxl-job-admin vulnerable to Cross Site Scripting
- CVE-2023-48087 xxl-job-admin vulnerable to Insecure Permissions
- CVE-2023-48085 Code injection in nagios:nagios xi
- CVE-2023-48084 SQL injection in nagios:nagios xi
- CVE-2023-48082 Weak cryptography in nagios:nagios xi
- CVE-2023-4808 WP Post Popup <= 3.7.3 - Admin+ Stored XSS
- CVE-2023-48078 SQL injection in code-projects:simple crud functionality
- CVE-2023-4807 POLY1305 MAC implementation corrupts XMM registers on Windows
- CVE-2023-48068 Cross-site scripting in dedecms:dedecms
- CVE-2023-48063 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48060 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-4806 Glibc: potential use-after-free in getaddrinfo()
- CVE-2023-48058 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48056 PyPinkSign uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption
- CVE-2023-48055 Hardcoded credentials in superagi:superagi
- CVE-2023-48054 Missing SSL certificate validation in localstack
- CVE-2023-48053 Weak cryptography in archerydms:archery
- CVE-2023-48052 HTTPie allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack
- CVE-2023-48051 upydev has weak encryption padding
- CVE-2023-48050 SQL injection in camsbiometrics:zkteco\, essl\, cams biometrics integration module
- CVE-2023-4805 Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scripting
- CVE-2023-48049 SQL injection in cybrosys:website blog search
- CVE-2023-48042 Cross-site scripting in communitydeveloper:amazzing filter
- CVE-2023-4804 Quantum HD Unity
- CVE-2023-48039 Denial of service in gpac:gpac
- CVE-2023-48034 Weak cryptography in acer:sk-9662 firmware
- CVE-2023-48031 File upload in opensupports:opensupports
- CVE-2023-4803 ITM Server Cross-site Scripting in WriteWindowTitle Endpoint
- CVE-2023-48029 Code injection in corebos:corebos
- CVE-2023-48028 Information disclosure in kodcloud:kodbox
- CVE-2023-48025 Memory corruption in howerj:liblisp
- CVE-2023-48024 Use after free in howerj:liblisp