Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 208 of 430.
- CVE-2023-45996 SQL injection in slims:senayan library management system
- CVE-2023-45992 Cross-site scripting in commscope:ruckus cloudpath enrollment system
- CVE-2023-45990 Privilege escalation in wenwen-ai:wenwenai cms
- CVE-2023-4599 Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-45985 Memory corruption in totolink:a7000r firmware
- CVE-2023-45984 Memory corruption in totolink:a7000r firmware
- CVE-2023-4598 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Blind SQL Injection via Shortcode
- CVE-2023-4597 Slimstat Analytics <= 5.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-45966 Server-side request forgery in remark42:remark42
- CVE-2023-4596 Forminator <= 1.24.6 - Unauthenticated Arbitrary File Upload
- CVE-2023-45958 Cross-site scripting in thirtybees:thirty bees
- CVE-2023-45957 Cross-site scripting in thirtybees:thirty bees
- CVE-2023-45956 Denial of service in govee:led strip firmware
- CVE-2023-45955 Denial of service in nanoleaf:lightstrip firmware
- CVE-2023-45952 File upload in lylme:lylme spage
- CVE-2023-45951 SQL injection in lylme:lylme spage
- CVE-2023-4595 Insertion of Sensitive Information into Externally-Accessible File or Directory in BVRP Software SLmail
- CVE-2023-4594 Cross-site Scripting in BVRP Software SLmail
- CVE-2023-45935 Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms().
- CVE-2023-45931 Null dereference in mesa3d:mesa
- CVE-2023-4593 Path Traversal in BVRP Software SLmail
- CVE-2023-45929 Memory corruption in jedsoft:s-lang
- CVE-2023-45927 Denial of service in jedsoft:s-lang
- CVE-2023-45925 GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c.
- CVE-2023-45924 libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen().
- CVE-2023-45922 Denial of service in mesa3d:mesa
- CVE-2023-45920 Null dereference in xfig project:xfig
- CVE-2023-4592 Improper Neutralization of Input During Web Page Generation in WPN-XM Serverstack
- CVE-2023-45919 Memory corruption in mesa3d:mesa
- CVE-2023-45913 Null dereference in mesa3d:mesa
- CVE-2023-45912 Auth bypass in wipotec:comscale
- CVE-2023-45911 Auth bypass in wipotec:comscale
- CVE-2023-4591 Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack
- CVE-2023-45909 Open redirect in zzzcms:zzzphp
- CVE-2023-45908 Homarr before v0.14.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notebook widget.
- CVE-2023-45907 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45906 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45905 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45904 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45903 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45902 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-45901 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-4590 Buffer Overflow vulnerability in Frhed
- CVE-2023-45899 Auth bypass in idnovate:superuser
- CVE-2023-45898 Use after free in linux:linux kernel
- CVE-2023-45897 Memory corruption in namjaejeon:exfatprogs
- CVE-2023-45896 ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Li
- CVE-2023-45894 Security feature bypass in parallels:remote application server
- CVE-2023-45893 Missing authorization in floorsightsoftware:customer portal
- CVE-2023-45892 Missing authorization in floorsightsoftware:insight
- CVE-2023-4589 Insufficient verification of data authenticity vulnerability in Delinea Secret Server
- CVE-2023-45889 Cross-site scripting in classlink:oneclick
- CVE-2023-45887 Other in nintendo:ds wireless communication
- CVE-2023-45886 Denial of service in f5:big-ip global traffic manager
- CVE-2023-45885 NASA Open MCT Cross Site Scripting vulnerability
- CVE-2023-45884 NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-45883 Privilege escalation in enghouse:qumu
- CVE-2023-45881 Cross-site scripting in gibbonedu:gibbon
- CVE-2023-45880 Path traversal in gibbonedu:gibbon
- CVE-2023-4588 File accessibility vulnerability in Delinea Secret Server
- CVE-2023-45879 Cross-site scripting in gibbonedu:gibbon
- CVE-2023-45878 File upload in gibbonedu:gibbon
- CVE-2023-45875 Information disclosure in couchbase:couchbase server
- CVE-2023-45874 Denial of service in couchbase:couchbase server
- CVE-2023-45873 Denial of service in couchbase:couchbase server
- CVE-2023-45872 An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1.
- CVE-2023-45871 Memory corruption in debian:debian linux
- CVE-2023-4587 Insecure direct object reference in ZKTeco ZEM800
- CVE-2023-45869 Command injection in ilias:ilias
- CVE-2023-45868 Path traversal in ilias:ilias
- CVE-2023-45867 Path traversal in ilias:ilias
- CVE-2023-45866 Auth bypass in apple:ipados
- CVE-2023-45864 Race condition in samsung:exynos 1080 firmware
- CVE-2023-45863 Race condition in linux:linux kernel
- CVE-2023-45862 Memory corruption in linux:linux kernel
- CVE-2023-45860 Hazelcast Platform permission checking in CSV File Source connector
- CVE-2023-4586 Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack
- CVE-2023-45859 Missing permission checks on Hazelcast client protocol
- CVE-2023-45858 Path traversal in PRTG Network Monitor
- CVE-2023-45857 Axios Cross-Site Request Forgery Vulnerability
- CVE-2023-45856 File upload in qdpm:qdpm
- CVE-2023-45855 Path traversal in qdpm:qdpm
- CVE-2023-45854 A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd p
- CVE-2023-45853 pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
- CVE-2023-45852 Command injection in viessmann:vitogate 300 firmware
- CVE-2023-45851 Auth bypass in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-4585 Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2
- CVE-2023-45849 Arbitrary Code Execution in Helix Core
- CVE-2023-45847 Playbook Plugin Crash via Run Checklist
- CVE-2023-45846 Other in Intel(R) Power Gadget software for macOS
- CVE-2023-45845 Denial of service in Intel(R) Wireless Bluetooth(R) products for Windows
- CVE-2023-45844 Security feature bypass in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-45842 Supply chain in Buildroot
- CVE-2023-45841 Supply chain in Buildroot
- CVE-2023-45840 Supply chain in Buildroot
- CVE-2023-4584 Memory corruption in Firefox
- CVE-2023-45839 Supply chain in Buildroot
- CVE-2023-45838 Supply chain in Buildroot
- CVE-2023-45837 WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45836 WordPress Ultimate Taxonomy Manager Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)