Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 210 of 430.
- CVE-2023-45724 Unauthenticated File Upload affects DRYiCE MyXalytics
- CVE-2023-45723 Path Traversal which allows file upload capability affects DRYiCE MyXalytics
- CVE-2023-45722 Path Traversal Arbitrary File Read affects DRYiCE MyXalytics
- CVE-2023-45721 HCL Domino Volt and Domino Leap are affected by a disclosure of private personal information vulnerability
- CVE-2023-45720 HCL Leap is affected by a disclosure of private personal information vulnerability
- CVE-2023-4572 Use after free in Chrome
- CVE-2023-45718 HCL Sametime is impacted by a failure to invalidate sessions
- CVE-2023-45716 HCL Sametime is impacted by a sensitive information disclosure
- CVE-2023-45715 HCL BigFix Platform is susceptible to a Denial of Service attack
- CVE-2023-4571 Unauthenticated Log Injection in Splunk IT Service Intelligence (ITSI)
- CVE-2023-45707 HCL Connections Docs is vulnerable to Cross-Site Scripting (XSS)
- CVE-2023-45706 HCL BigFix Platform is susceptible to Cross Site Scripting (XSS) and/or Man in the Middle (MITM) attack
- CVE-2023-45705 HCL BigFix Platform is susceptible to Server Side Request Forgery (SSRF)
- CVE-2023-45703 HCL Launch is susceptible to a Denial of Service vulnerability
- CVE-2023-45702 HCL Launch Agent as a Windows service is vulnerable to a Denial of Service
- CVE-2023-45701 HCL Launch is susceptible to sensitive information disclosure
- CVE-2023-45700 HCL Launch is susceptible to an HTML injection vulnerability
- CVE-2023-4570 Improper Restriction in NI MeasurementLink Python Services
- CVE-2023-45698 HCL Sametime is impacted by clickjacking
- CVE-2023-45696 HCL Sametime is impacted by an autocomplete enabled vulnerability
- CVE-2023-45690 Information leak via default file permissions on Titan MFT and Titan SFTP servers
- CVE-2023-4569 Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c
- CVE-2023-45689 Arbitrary file read via path traversal in Titan MFT and Titan SFTP servers
- CVE-2023-45688 Information leak via path traversal in Titan MFT and Titan SFTP servers
- CVE-2023-45687 Authentication bypass via session fixation in Titan MFT and Titan SFTP servers
- CVE-2023-45686 Arbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP servers
- CVE-2023-45685 Arbitrary file write via "zip slip" in Titan MFT and Titan SFTP servers
- CVE-2023-45684 SQL injection in northern.tech:cfengine
- CVE-2023-45683 Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/saml
- CVE-2023-45682 Wild address read in vorbis_decode_packet_rest in stb_vorbis
- CVE-2023-45681 Out of bounds heap buffer write in stb_vorbis
- CVE-2023-45680 Null pointer dereference in vorbis_deinit in stb_vorbis
- CVE-2023-4568 PaperCut NG Unauthenticated XMLRPC
- CVE-2023-45679 Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis
- CVE-2023-45678 Off-by-one heap buffer write in start_decoder in stb_vorbis
- CVE-2023-45677 Heap buffer out of bounds write in start_decoder in stb_vorbis
- CVE-2023-45676 Multi-byte write heap buffer overflow in start_decoder in stb_vorbis
- CVE-2023-45675 0 byte write heap buffer overflow in start_decoder in stb_vorbis
- CVE-2023-45674 SQL injection vulnerability in Farmbot-Web-App
- CVE-2023-45673 Arbitrary code execution on click of PDF links in Joplin
- CVE-2023-45672 Frigate unsafe deserialization in `load_config_with_no_duplicates` of `frigate/util/builtin.py`
- CVE-2023-45671 Frigate reflected XSS through `/<camera_name>` API endpoints
- CVE-2023-45670 Frigate cross-site request forgery in `config_save` and `config_set` request handlers
- CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security
- CVE-2023-45667 Null pointer dereference because of an uninitialized variable in stb_image
- CVE-2023-45666 Possible double-free or memory leak in stbi__load_gif_main in stb_image
- CVE-2023-45664 Double-free in stbi__load_gif_main_outofmem in stb_image
- CVE-2023-45663 Disclosure of uninitialized memory in stbi__tga_load in stb_image
- CVE-2023-45662 Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image
- CVE-2023-45661 Wild address read in stbi__gif_load_next in stb_image
- CVE-2023-45660 Require strict cookies for image proxy requests in Nextcloud Mail
- CVE-2023-4566 Security feature bypass in EMUI
- CVE-2023-45659 Session is not expiring after password reset in Engelsystem
- CVE-2023-45658 WordPress Nexter theme <= 2.0.3 - Broken Access Control vulnerability
- CVE-2023-45657 WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection
- CVE-2023-45656 WordPress Lazy Load for Videos Plugin <= 2.18.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45655 WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45654 WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45653 WordPress Video Playlist For YouTube Plugin <= 6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45652 WordPress Remote Content Shortcode plugin <= 1.5 - Local File Inclusion vulnerability
- CVE-2023-45651 WordPress WP Attachments Plugin <= 5.0.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45650 WordPress HTML5 Maps Plugin <= 1.7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4565 Missing authorization in EMUI
- CVE-2023-45649 WordPress Appointment Hour Booking plugin <= 1.4.23 - Broken Access Control vulnerability
- CVE-2023-45648 Apache Tomcat: Trailer header parsing too lenient
- CVE-2023-45647 WordPress Constant Contact Forms by MailMunch Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45646 WordPress PDF Block Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45645 WordPress WP Open Street Map Plugin <= 1.25 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45644 WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45643 WordPress CPT Shortcode Generator Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45642 WordPress Snap Pixel Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45641 WordPress Caret Country Access Limit Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45640 WordPress WP ULike Plugin <= 4.6.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4564 Multiple vulnerabilities in Canopsis of Capensis
- CVE-2023-45639 WordPress Sort SearchResult By Title Plugin <= 10.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45638 WordPress Eupago Gateway For Woocommerce Plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45637 WordPress EventPrime Plugin <= 3.1.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45636 WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability
- CVE-2023-45635 WordPress Responsive Tabs plugin < 4.0.6 - HTML Content Injection vulnerability
- CVE-2023-45634 WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45633 WordPress IMPress Listings plugin <= 2.6.2 - Broken Access Control vulnerability
- CVE-2023-45632 WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45631 WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerability
- CVE-2023-45630 WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45629 WordPress Responsive Image Gallery, Gallery Album Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45628 WordPress QR Twitter Widget Plugin <= 0.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45627 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45626 Privilege escalation in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45625 Command injection in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45624 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45623 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45622 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45621 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45620 Denial of service in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-4562 Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module
- CVE-2023-45619 Path traversal in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45618 Path traversal in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45617 Path traversal in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45616 Memory corruption in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;
- CVE-2023-45615 Memory corruption in Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;