Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 205 of 430.
- CVE-2023-46353 SQL injection in mypresta:product tag icons pro
- CVE-2023-46352 Missing authorization in smartmodules:facebookconversiontrackingplus
- CVE-2023-46351 SQL injection in mypresta:manufacturers \(brands\) images block
- CVE-2023-46350 SQL injection in innovadeluxe:manufacturer or supplier alphabetical search
- CVE-2023-4635 EventON <= 2.2.2 - Reflected Cross-Site Scripting
- CVE-2023-46349 SQL injection in myprestamodules:updateproducts
- CVE-2023-46348 SQL injection in sunnytoo:sturls
- CVE-2023-46347 SQL injection in ndkdesign:ndk steppingpack
- CVE-2023-46346 Path traversal in myprestamodules:exportproducts
- CVE-2023-46345 Null dereference in fossies:catdoc
- CVE-2023-46344 Cross-site scripting in solar-log:2000 pm\+ firmware
- CVE-2023-46343 Null dereference in linux:linux kernel
- CVE-2023-4634 Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution
- CVE-2023-46332 Memory corruption in webassembly:webassembly binary toolkit
- CVE-2023-46331 Memory corruption in webassembly:webassembly binary toolkit
- CVE-2023-46327 Weak cryptography in Apeos 1860 Japan Model
- CVE-2023-46326 Auth bypass in zstack:zstack
- CVE-2023-46324 free5GC udm vulnerable to Invalid Curve Attack
- CVE-2023-46322 Other in iterm2:iterm2
- CVE-2023-46321 Command injection in iterm2:iterm2
- CVE-2023-4632 Privilege escalation in Lenovo System Update
- CVE-2023-46319 Auth bypass in wallix:bastion
- CVE-2023-46317 Denial of service in nic:knot resolver
- CVE-2023-46316 Command injection in buc:traceroute
- CVE-2023-46315 Path traversal in zanllp:stable diffusion webui infinite image browsing
- CVE-2023-46313 WordPress Zotpress Plugin <= 7.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46312 WordPress Smart Online Order for Clover Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46311 WordPress wpDiscuz Plugin <= 7.6.3 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-46310 WordPress wpDiscuz plugin <= 7.6.10 - Content Injection vulnerability
- CVE-2023-4631 DoLogin Security < 3.7 - IP Spoofing
- CVE-2023-46309 WordPress wpDiscuz plugin <= 7.6.10 - Broken Access Control vulnerability
- CVE-2023-46308 plotly.js prototype pollution vulnerability
- CVE-2023-46307 Path traversal in buddho:etcd browser
- CVE-2023-46306 Command injection in netmodule:netmodule router software
- CVE-2023-46304 Code injection in vtiger:vtiger crm
- CVE-2023-46303 Server-side request forgery in calibre-ebook:calibre
- CVE-2023-46302 Apache Submarine: Fix CVE-2022-1471 SnakeYaml unsafe deserialization
- CVE-2023-46301 Code injection in iterm2:iterm2
- CVE-2023-46300 Code injection in iterm2:iterm2
- CVE-2023-4630 Missing Authorization in GitLab
- CVE-2023-46298 Next.js missing cache-control header may lead to CDN caching empty reply
- CVE-2023-46297 An issue was discovered on Mercusys MW325R EU V3 MW325R(EU)_V3_1.11.0 221019 devices.
- CVE-2023-46295 An issue was discovered in Teledyne FLIR M300 2.00-19.
- CVE-2023-46294 An issue was discovered in Teledyne FLIR M300 2.00-19.
- CVE-2023-46290 Rockwell Automation FactoryTalk Services Platform Elevated Privileges Vulnerability
- CVE-2023-4629 LadiApp <= 4.4 - Cross-Site Request Forgery via save_config()
- CVE-2023-46289 Rockwell Automation FactoryTalk® View Site Edition Vulnerable to Improper Input Validation
- CVE-2023-46288 Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set
- CVE-2023-46287 Cross-site scripting in nagvis:nagvis
- CVE-2023-46285 Denial of service in Opcenter Execution Foundation
- CVE-2023-46284 Memory corruption in Opcenter Execution Foundation
- CVE-2023-46283 Memory corruption in Opcenter Execution Foundation
- CVE-2023-46282 Cross-site scripting in Opcenter Execution Foundation
- CVE-2023-46281 Misconfiguration in Opcenter Execution Foundation
- CVE-2023-46280 Memory corruption in SIMATIC Automation Tool
- CVE-2023-4628 LadiApp <= 4.4 - Cross-Site Request Forgery via ladiflow_save_hook()
- CVE-2023-46279 Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
- CVE-2023-46278 Denial of service in Cybozu Remote Service
- CVE-2023-46277 Pleaser privilege escalation vulnerability
- CVE-2023-46273 Memory corruption in IQ Engine
- CVE-2023-46272 Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute
- CVE-2023-46271 Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow.
- CVE-2023-46270 MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items.
- CVE-2023-4627 LadiApp <= 4.4 - Missing Authorization via save_config()
- CVE-2023-46266 Information disclosure in Avalanche
- CVE-2023-46265 XML external entity in Avalanche
- CVE-2023-46264 File upload in Avalanche
- CVE-2023-46263 File upload in Avalanche
- CVE-2023-46262 Server-side request forgery in Avalanche
- CVE-2023-46261 Memory corruption in Avalanche
- CVE-2023-46260 Memory corruption in Avalanche
- CVE-2023-4626 Missing authorization in LadiApp: Landing Page, PopupX, Marketing Automation, Affiliate Marketing…
- CVE-2023-46259 Memory corruption in Avalanche
- CVE-2023-46258 Memory corruption in Avalanche
- CVE-2023-46257 Memory corruption in Avalanche
- CVE-2023-46256 PX4-Autopilot Heap Buffer Overflow Bug
- CVE-2023-46255 `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed
- CVE-2023-46254 Service accounts can see namespaces of other tenants in capsule-proxy
- CVE-2023-46253 Remote code execution in Squidex
- CVE-2023-46252 Cross-Site Scripting (XSS) via postMessage Handler in Squidex
- CVE-2023-46251 Visual editor persistent Cross-site Scripting (XSS) in MyBB
- CVE-2023-46250 pypdf possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
- CVE-2023-4625 Denial-of-Service（DoS） Vulnerability in Web server function on MELSEC Series CPU module
- CVE-2023-46249 authentik potential installation takeover when default admin user is deleted
- CVE-2023-46248 Overwrite of builtin Cody commands facilitates RCE
- CVE-2023-46247 Vyper has incorrect storage layout for contracts containing large arrays
- CVE-2023-46246 Integer Overflow in :history command in Vim
- CVE-2023-46245 Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
- CVE-2023-46244 Privilege escalation in Xwiki platform
- CVE-2023-46243 Code execution via the edit action in XWiki platform
- CVE-2023-46242 Code injection in XWiki Platform
- CVE-2023-46241 Potential account take over due to unverified emails from Microsoft Identity Platform
- CVE-2023-46240 CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
- CVE-2023-4624 Server-Side Request Forgery (SSRF) in bookstackapp/bookstack
- CVE-2023-46239 quic-go vulnerable to pointer dereference that can lead to panic
- CVE-2023-46238 XSS with User Avatar image in ZITADEL
- CVE-2023-46237 FOG path traversal via unauthenticated endpoint
- CVE-2023-46236 FOG SSRF via unauthenticated endpoint(s)
- CVE-2023-46235 FOG stored XSS on log screen via unsanitized request logging
- CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack