Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 200 of 430.
- CVE-2023-47035 Business logic in etherscan:reptilian coin
- CVE-2023-47034 Business logic in uniswapfrontrunbot project:uniswapfrontrunbot
- CVE-2023-47033 Race condition in multisigwallet project:multisigwallet
- CVE-2023-47032 Code injection in ncr:terminal handler
- CVE-2023-47031 Privilege escalation in ncr:terminal handler
- CVE-2023-47030 Code injection in ncr:terminal handler
- CVE-2023-4703 All in One B2B for WooCommerce <= 1.0.3 - Unauthenticated Privilege Escalation
- CVE-2023-47029 Information disclosure in ncr:terminal handler
- CVE-2023-47025 Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component
- CVE-2023-47024 Cross-site request forgery in ncratleos:terminal handler
- CVE-2023-47022 Missing authorization in ncr:terminal handler
- CVE-2023-47020 Cross-site request forgery in ncratleos:terminal handler
- CVE-2023-4702 Authentication Bypass in Digital Yepas
- CVE-2023-47016 Memory corruption in radare:radare2
- CVE-2023-47014 Cross-site request forgery in remyandrade:sticky notes app
- CVE-2023-47004 Memory corruption in redislabs:redisgraph
- CVE-2023-47003 Code injection in redislabs:redisgraph
- CVE-2023-4700 Missing Authorization in GitLab
- CVE-2023-46998 Bootbox.js Cross Site Scripting vulnerability
- CVE-2023-46993 Command injection in totolink:a3300r firmware
- CVE-2023-46992 Missing authorization in totolink:a3300r firmware
- CVE-2023-46990 Deserialization in publiccms:publiccms
- CVE-2023-4699 Auth bypass in MELSEC L Series LD77MS16
- CVE-2023-46989 SQL injection in innovadeluxe:quick order
- CVE-2023-46988 Path traversal in onlyoffice:document server
- CVE-2023-46987 Code injection in seacms:seacms
- CVE-2023-46981 SQL injection in xxyopen:novel-plus
- CVE-2023-46980 Code injection in mayurik:best courier management system
- CVE-2023-4698 Improper Input Validation in usememos/memos
- CVE-2023-46979 Command injection in totolink:x6000r firmware
- CVE-2023-46978 Auth bypass in totolink:x6000r firmware
- CVE-2023-46977 Memory corruption in totolink:lr1200gb firmware
- CVE-2023-46976 Command injection in totolink:a3300r firmware
- CVE-2023-46974 Cross-site scripting in mayurik:courier management system
- CVE-2023-4697 Improper Privilege Management in usememos/memos
- CVE-2023-46967 Cross-site scripting in enhancesoft:osticket
- CVE-2023-46964 Cross-site scripting in Next Generation FireWall SG-6000-E3960
- CVE-2023-46963 Auth bypass in kaoshifeng:yunfan learning examination system
- CVE-2023-46960 PyPXE Buffer Overflow vulnerability
- CVE-2023-4696 Improper Access Control in usememos/memos
- CVE-2023-46958 Code injection in lmxcms:lmxcms
- CVE-2023-46956 SQL injection in oretnom23:packers and movers management system
- CVE-2023-46954 SQL injection in relativity:relativityone
- CVE-2023-46953 SQL injection in abocms:abo.cms
- CVE-2023-46952 Cross-site scripting in abocms:abo.cms
- CVE-2023-46951 Cross-site scripting in contribsys:sidekiq
- CVE-2023-46950 Cross-site scripting in contribsys:sidekiq
- CVE-2023-4695 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
- CVE-2023-46948 A reflected Cross-Site Scripting (XSS) vulnerability was found on Temenos T24 Browser R19.40 that enables a remote attacker to execute arbit
- CVE-2023-46947 Subrion remote command execution vulnerability
- CVE-2023-46945 Server-side request forgery in qd-today:qd
- CVE-2023-46944 Code injection in gitkraken:gitlens
- CVE-2023-46943 EverShop at risk to unauthorized access via weak HMAC secret
- CVE-2023-46942 EverShop vulnerable to improper authorization in GraphQL endpoints
- CVE-2023-4694 Denial of service in HP OfficeJet Pro Printers
- CVE-2023-46935 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-46932 Memory corruption in gpac:gpac
- CVE-2023-46931 Memory corruption in gpac:gpac
- CVE-2023-46930 Memory corruption in gpac:gpac
- CVE-2023-4693 Grub2: out-of-bounds read at fs/ntfs.c
- CVE-2023-46929 Denial of service in gpac:gpac
- CVE-2023-46928 Memory corruption in gpac:gpac
- CVE-2023-46927 Memory corruption in gpac:gpac
- CVE-2023-46925 Reportico Cross-site Scripting vulnerability
- CVE-2023-4692 Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution
- CVE-2023-46919 Hardcoded credentials in fedirtsapana:simple http server
- CVE-2023-46918 Misconfiguration in fedirtsapana:simple http server plus
- CVE-2023-46916 Auth bypass in maximawatches:maxima max pro power firmware
- CVE-2023-46914 SQL injection in bookingcalendar project:bookingcalendar
- CVE-2023-46911 Cross-site scripting in jspxcms:jspxcms
- CVE-2023-4691 Bookly < 22.4 - Admin+ SQLi
- CVE-2023-46906 juzawebCMS Incorrect Access Control vulnerability
- CVE-2023-4690 Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
- CVE-2023-46894 esptool allows attackers to view sensitive information via weak cryptographic algorithm
- CVE-2023-46892 Auth bypass in meross:msh30q firmware
- CVE-2023-4689 Elementor Addon Elements <= 1.12.7 - Cross-Site Request Forgery
- CVE-2023-46889 Information disclosure in meross:msh30q firmware
- CVE-2023-46887 Path traversal in iteachyou:dreamer cms
- CVE-2023-46886 Path traversal in iteachyou:dreamer cms
- CVE-2023-4688 Information disclosure in Acronis Agent
- CVE-2023-46871 Denial of service in gpac:gpac
- CVE-2023-46870 extcap/nrf_sniffer_ble.py, extcap/nrf_sniffer_ble.sh, extcap/SnifferAPI/*.py in Nordic Semiconductor nRF Sniffer for Bluetooth LE 3.0.0, 3.1
- CVE-2023-4687 PageLayer < 1.7.7 - Unauthenticated Stored XSS
- CVE-2023-46867 Null dereference in color:demoiccmax
- CVE-2023-46866 Memory corruption in color:demoiccmax
- CVE-2023-46865 Code injection in craterapp:crater
- CVE-2023-46864 Path traversal in peppermint:peppermint
- CVE-2023-46863 Path traversal in peppermint:peppermint
- CVE-2023-46862 Null dereference in linux:linux kernel
- CVE-2023-4686 WP Customer Reviews <= 3.6.6 - Authenticated (Subscriber+) Sensitive Information Exposure
- CVE-2023-46858 Cross-site scripting in moodle:moodle
- CVE-2023-46857 Cross-site scripting in squidex.io:squidex
- CVE-2023-46854 Cross-site scripting in proxmox:proxmox-widget-toolkit
- CVE-2023-46853 Memory corruption in memcached:memcached
- CVE-2023-46852 Memory corruption in memcached:memcached
- CVE-2023-46851 Apache Allura: sensitive information exposure via import
- CVE-2023-46850 Use after free in Access Server
- CVE-2023-4685 CVE-2023-4685
- CVE-2023-46849 Denial of service in Access Server
- CVE-2023-46848 Squid: denial of service in ftp