Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 197 of 430.
- CVE-2023-47440 Directory Traversal in Gladys Assistant
- CVE-2023-4744 Tenda AC8 formSetDeviceName stack-based overflow
- CVE-2023-47438 SQL Injection vulnerability in Reportico Till
- CVE-2023-47437 Cross-site scripting in pachno:pachno
- CVE-2023-47435 An issue in the verifyPassword function of hexo-theme-matery v2.0.0 allows attackers to bypass authentication and access password protected pages.
- CVE-2023-47430 Memory corruption in readymedia project:readymedia
- CVE-2023-4743 Dreamer CMS file access
- CVE-2023-47422 Auth bypass in tenda:ax12 firmware
- CVE-2023-4742 IBOS OA export&uid=X sql injection
- CVE-2023-47418 Code injection in zoneland:o2oa
- CVE-2023-47417 Cross-site scripting in paulrouget:dzslides
- CVE-2023-47415 Command injection in cypress:ctm-200 firmware
- CVE-2023-4741 IBOS OA Delete Logs del sql injection
- CVE-2023-4740 IBOS OA Delete Draft delDraft&archiveId=0 sql injection
- CVE-2023-47397 Code injection in webidsupport:webid
- CVE-2023-47393 Missing authorization in mercedes-benz:mercedes me
- CVE-2023-47392 Missing authorization in mercedes-benz:mercedes me
- CVE-2023-47390 Headscale writes bearer tokens to info-level logs
- CVE-2023-4739 Byzoro Smart S85F Management Platform updateos.php unrestricted upload
- CVE-2023-47384 Denial of service in gpac:gpac
- CVE-2023-47380 Cross-site Scripting in Admidio
- CVE-2023-4738 Heap-based Buffer Overflow in vim/vim
- CVE-2023-47379 Microweber Cross-site Scripting vulnerability
- CVE-2023-47373 Information disclosure in linecorp:line
- CVE-2023-47372 Information disclosure in linecorp:line
- CVE-2023-47370 Information disclosure in linecorp:line
- CVE-2023-4737 SQLi in Hedef Trackings Admin Panel
- CVE-2023-47369 Information disclosure in linecorp:line
- CVE-2023-47368 Information disclosure in linecorp:line
- CVE-2023-47367 Information disclosure in linecorp:line
- CVE-2023-47366 Information disclosure in linecorp:line
- CVE-2023-47365 Information disclosure in linecorp:line
- CVE-2023-47364 Information disclosure in linecorp:line
- CVE-2023-47363 Information disclosure in linecorp:line
- CVE-2023-47360 Integer overflow in videolan:vlc media player
- CVE-2023-4736 Untrusted Search Path in vim/vim
- CVE-2023-47359 Memory corruption in videolan:vlc media player
- CVE-2023-47356 Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via the log_type parameter
- CVE-2023-47355 Missing authorization in eyuepcanyilmaz:root quick reboot
- CVE-2023-47354 Missing authorization in binhdrm26:super reboot
- CVE-2023-47353 Other in imoulife:imou go
- CVE-2023-47352 Weak cryptography in technicolor:tc8715d firmware
- CVE-2023-47350 Cross Site Request Forgery in SwiftyEdit
- CVE-2023-4735 Out-of-bounds Write in vim/vim
- CVE-2023-47347 Memory corruption in free5gc:free5gc
- CVE-2023-47346 Memory corruption in free5gc:free5gc
- CVE-2023-47345 free5gc Buffer Overflow vulnerability
- CVE-2023-4734 Integer Overflow or Wraparound in vim/vim
- CVE-2023-47335 Security feature bypass in autelrobotics:evo nano drone firmware
- CVE-2023-4733 Use After Free in vim/vim
- CVE-2023-47327 Broken access control in Silverpeas
- CVE-2023-47326 Cross Site Request Forgery in Silverpeas
- CVE-2023-47325 Broken access control in Silverpeas
- CVE-2023-47324 Cross-site Scripting in silverpeas
- CVE-2023-47323 Missing access control in Silverpeas
- CVE-2023-47322 Cross Site Request Forgery in Silverpeas
- CVE-2023-47321 Broken access control in Silverpeas
- CVE-2023-47320 Broken access control in Silverpeas
- CVE-2023-4732 Race condition in Red Hat Enterprise Linux 6
- CVE-2023-47316 Missing authorization in h-mdm:headwind mdm
- CVE-2023-47315 Hardcoded credentials in h-mdm:headwind mdm
- CVE-2023-47314 Cross-site scripting in h-mdm:headwind mdm
- CVE-2023-47313 Path traversal in h-mdm:headwind mdm
- CVE-2023-47312 Information disclosure in h-mdm:headwind mdm
- CVE-2023-47311 Other in spaceapplications:yacms
- CVE-2023-47310 A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.
- CVE-2023-4731 Cross-site request forgery in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
- CVE-2023-47309 Cross-site scripting in nukium:gls
- CVE-2023-47308 SQL injection in activedesign:newsletterpop
- CVE-2023-47307 Memory corruption in szlbt:lbt-t300-t310 firmware
- CVE-2023-47304 Auth bypass in vonage:vdv23 firmware
- CVE-2023-4730 Missing authorization in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
- CVE-2023-47298 Information disclosure in ncr:terminal handler
- CVE-2023-47297 Missing authorization in ncr:terminal handler
- CVE-2023-47295 Code injection in ncr:terminal handler
- CVE-2023-47294 Missing authorization in ncr:terminal handler
- CVE-2023-4729 Cross-site request forgery in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
- CVE-2023-47283 Path traversal in CubeCart
- CVE-2023-47282 Memory corruption in Intel(R) oneVPL software
- CVE-2023-4728 Missing authorization in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
- CVE-2023-47279 Delta Electronics InfraSuite Device Master Path Traversal
- CVE-2023-47272 Cross-site scripting in debian:debian linux
- CVE-2023-47271 File upload in sfu:pkp web application library
- CVE-2023-4727 Ca: token authentication bypass vulnerability
- CVE-2023-47268 Command injection in prusa3d:prusaslicer
- CVE-2023-47267 Privilege escalation in thegreenbow:thegreenbow vpn client
- CVE-2023-47265 Apache Airflow: DAG Params alllow to embed unchecked Javascript
- CVE-2023-47264 Memory corruption in withsecure:atlant
- CVE-2023-47263 Denial of service in withsecure:atlant
- CVE-2023-47262 Security feature bypass in abbott:id now firmware
- CVE-2023-47261 Information disclosure in dokmee:enterprise content management
- CVE-2023-47260 Cross-site scripting in redmine:redmine
- CVE-2023-4726 Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
- CVE-2023-47259 Cross-site scripting in redmine:redmine
- CVE-2023-47258 Cross-site scripting in redmine:redmine
- CVE-2023-47257 Code injection in connectwise:automate
- CVE-2023-47256 Auth bypass in connectwise:automate
- CVE-2023-47254 Command injection in draytek:vigor167 firmware
- CVE-2023-47253 Code injection in qualitor:qualitor
- CVE-2023-47252 Memory corruption in insyde:kernel