Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 204 of 430.
- CVE-2023-46496 Directory Traversal in evershop
- CVE-2023-46495 Cross-site Scripting in evershop
- CVE-2023-46494 Cross Site Scripting in evershop
- CVE-2023-46493 Directory Traversal in evershop
- CVE-2023-46492 Cross-site scripting in mldb:machine learning database
- CVE-2023-46491 Cross-site scripting in zentao:biz
- CVE-2023-46490 SQL injection in cacti:cacti
- CVE-2023-4649 Session Fixation in instantsoft/icms2
- CVE-2023-46485 Command injection in totolink:x6000r firmware
- CVE-2023-46484 Command injection in totolink:x6000r firmware
- CVE-2023-46483 Cross-site scripting in timeteccloud:auto web-based database management system
- CVE-2023-46482 SQL injection in wuzhicms:wuzhicms
- CVE-2023-46480 OwnCast remote code execution vulnerability
- CVE-2023-4648 WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-46478 Code injection in minical:minical
- CVE-2023-46475 Cross-site scripting in easycorp:zentao
- CVE-2023-46474 File upload in sigb:pmb
- CVE-2023-46471 Cross-site scripting in spaceapplications:yacms
- CVE-2023-46470 Cross-site scripting in spaceapplications:yacms
- CVE-2023-4647 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-46468 juzawebCMS Injection vulnerability
- CVE-2023-46467 Cross-site scripting in juzaweb:cms
- CVE-2023-4646 Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS
- CVE-2023-46456 Command injection in gl-inet:gl-ar300m firmware
- CVE-2023-46455 Path traversal in gl-inet:gl-ar300m firmware
- CVE-2023-46454 Command injection in gl-inet:gl-ar300m firmware
- CVE-2023-46453 Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username tha
- CVE-2023-46451 Cross-site scripting in mayurik:best courier management system
- CVE-2023-46450 Cross-site scripting in mayurik:inventory management system
- CVE-2023-4645 Ad Inserter <= 2.7.30 - Unauthenticated Sensitive Information Exposure via ai_ajax
- CVE-2023-46449 Missing authorization in mayurik:inventory management system
- CVE-2023-46448 Cross-site scripting in dmpop:mejiro
- CVE-2023-46447 Information disclosure in popsdiabetes:rebel
- CVE-2023-46446 AsyncSSH Rogue Session Attack
- CVE-2023-46445 AsyncSSH Rogue Extension Negotiation
- CVE-2023-46442 Soot Infinite Loop vulnerability
- CVE-2023-46435 SQL injection in oretnom23:packers and movers management system
- CVE-2023-4643 Enable Media Replace < 4.1.3 - Author+ PHP Object Injection
- CVE-2023-46428 File upload in hadsky:hadsky
- CVE-2023-46427 Null dereference in gpac:gpac
- CVE-2023-46426 Memory corruption in gpac:gpac
- CVE-2023-46424 Command injection in totolink:x6000r firmware
- CVE-2023-46423 Command injection in totolink:x6000r firmware
- CVE-2023-46422 Command injection in totolink:x6000r firmware
- CVE-2023-46421 Command injection in totolink:x6000r firmware
- CVE-2023-46420 Command injection in totolink:x6000r firmware
- CVE-2023-4642 kk Star Ratings < 5.4.6 - Rating Tampering via Race Condition
- CVE-2023-46419 Command injection in totolink:x6000r firmware
- CVE-2023-46418 Command injection in totolink:x6000r firmware
- CVE-2023-46417 Command injection in totolink:x6000r firmware
- CVE-2023-46416 Command injection in totolink:x6000r firmware
- CVE-2023-46415 Command injection in totolink:x6000r firmware
- CVE-2023-46414 Command injection in totolink:x6000r firmware
- CVE-2023-46413 Command injection in totolink:x6000r firmware
- CVE-2023-46412 Command injection in totolink:x6000r firmware
- CVE-2023-46411 Command injection in totolink:x6000r firmware
- CVE-2023-46410 Command injection in totolink:x6000r firmware
- CVE-2023-4641 Shadow-utils: possible password leak during passwd(1) change
- CVE-2023-46409 Command injection in totolink:x6000r firmware
- CVE-2023-46408 Command injection in totolink:x6000r firmware
- CVE-2023-46407 Memory corruption in ffmpeg:ffmpeg
- CVE-2023-46404 Code injection in utoronto:pcrs
- CVE-2023-46402 Inefficient Regular Expression Complexity in git-urls
- CVE-2023-46401 Code injection in kwhotel:kwhotel
- CVE-2023-46400 Code injection in kwhotel:kwhotel
- CVE-2023-4640 Set Logging Level Without Authentication
- CVE-2023-46396 Cross-site scripting in web-audimex:audimex
- CVE-2023-46394 Cross-site scripting in gougucms:gougucms
- CVE-2023-46393 Business logic in gougucms:gougucms
- CVE-2023-4639 Undertow: cookie smuggling/spoofing
- CVE-2023-46389 Information disclosure in loytec:linx-151 firmware
- CVE-2023-46388 Information disclosure in loytec:linx-151 firmware
- CVE-2023-46387 Missing authorization in loytec:linx-151 firmware
- CVE-2023-46386 Information disclosure in loytec:linx-151 firmware
- CVE-2023-46385 Information disclosure in loytec:l-inx configurator
- CVE-2023-46384 Information disclosure in loytec:l-inx configurator
- CVE-2023-46383 Weak cryptography in loytec:l-inx configurator
- CVE-2023-46382 Weak cryptography in loytec:linx-212 firmware
- CVE-2023-46381 Missing authorization in loytec:linx-212 firmware
- CVE-2023-46380 Information disclosure in loytec:linx-212 firmware
- CVE-2023-46378 Cross-site scripting in 1234n:minicms
- CVE-2023-46376 Information disclosure in zentao:biz
- CVE-2023-46375 Cross-site request forgery in zentao:biz
- CVE-2023-46374 Cross-site scripting in zentao:biz
- CVE-2023-46373 Memory corruption in tp-link:tl-wdr7660 firmware
- CVE-2023-46371 Memory corruption in tp-link:tl-wdr7660 firmware
- CVE-2023-46370 Command injection in tenda:w18e firmware
- CVE-2023-4637 WPvivid <= 0.9.94 - Missing Authorization
- CVE-2023-46369 Memory corruption in tenda:w18e firmware
- CVE-2023-46363 Memory corruption in jbig2enc project:jbig2enc
- CVE-2023-46362 Use after free in jbig2enc project:jbig2enc
- CVE-2023-46361 Denial of service in artifex:jbig2dec
- CVE-2023-46360 Privilege escalation in hardy-barth:cph2 echarge firmware
- CVE-2023-4636 WordPress File Sharing Plugin <= 2.0.3 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-46359 Command injection in hardy-barth:cph2 echarge firmware
- CVE-2023-46358 SQL injection in snegurka:referralbyphone
- CVE-2023-46357 SQL injection in myprestamodules:cross selling in modal cart
- CVE-2023-46356 SQL injection in blmodules:csv feeds pro
- CVE-2023-46355 Missing authorization in blmodules:csv feeds pro
- CVE-2023-46354 Missing authorization in myprestamodules:orders \(csv\, excel\) export pro