Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 212 of 430.
- CVE-2023-45383 Path traversal in common-services:sonice etiquetage
- CVE-2023-45382 Path traversal in common-services:sonice retour
- CVE-2023-45381 SQL injection in webshopworks:creativepopup
- CVE-2023-45380 Missing authorization in silbersaiten:order duplicator
- CVE-2023-4538 Shared Key in Comarch ERP XL
- CVE-2023-45379 SQL injection in posthemes:posrotatorimg
- CVE-2023-45378 SQL injection in hdclic:prestablog
- CVE-2023-45377 SQL injection in chronopost:chronopost
- CVE-2023-45376 SQL injection in hipresta:carousels pack
- CVE-2023-45375 SQL injection in 01generator:pireospay
- CVE-2023-45374 Cross-site request forgery in mediawiki:mediawiki
- CVE-2023-45373 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-45372 Security feature bypass in mediawiki:mediawiki
- CVE-2023-45371 Denial of service in mediawiki:mediawiki
- CVE-2023-45370 Missing authorization in mediawiki:mediawiki
- CVE-2023-4537 Protocol Downgrade in Comarch ERP XL
- CVE-2023-45369 Information disclosure in mediawiki:mediawiki
- CVE-2023-45367 Denial of service in mediawiki:mediawiki
- CVE-2023-45364 Information disclosure in debian:debian linux
- CVE-2023-45363 MediaWiki Denial of Service vulnerability
- CVE-2023-45362 Information disclosure in mediawiki:mediawiki
- CVE-2023-45361 An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1.
- CVE-2023-45360 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-4536 My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload
- CVE-2023-45359 An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1.
- CVE-2023-45358 Cross-site scripting in archerirm:archer
- CVE-2023-45357 Information disclosure in archerirm:archer
- CVE-2023-45356 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-45355 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-45354 Code injection in atos:unify openscape common management
- CVE-2023-45353 File upload in atos:unify openscape common management
- CVE-2023-45352 Path traversal in atos:unify openscape common management
- CVE-2023-45351 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-45350 Privilege escalation in atos:unify openscape 4000 manager
- CVE-2023-4535 Opensc: out-of-bounds read in myeid driver handling encryption using symmetric keys
- CVE-2023-45349 Information disclosure in atos:unify openscape 4000 assistant
- CVE-2023-45348 Apache Airflow: Configuration information leakage vulnerability
- CVE-2023-45347 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45346 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45345 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45344 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45343 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45342 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45341 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45340 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4534 NeoMind Fusion Platform Link cross site scripting
- CVE-2023-45338 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45336 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45334 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45325 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45323 Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45322 Use after free in xmlsoft:libxml2
- CVE-2023-45321 Weak cryptography in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-45320 Privilege escalation in Intel(R) VTune(TM) Profiler software
- CVE-2023-4532 Incorrect Authorization in GitLab
- CVE-2023-45319 Unauthenticated Remote Denial-of-Service (Commit) in Helix Core
- CVE-2023-45318 Memory corruption in Gecko Platform
- CVE-2023-45317 Sielco Radio Link and Analog FM Transmitters Cross-Site Request Forgery
- CVE-2023-45316 Reflected client side path traversal leading to CSRF in Playbooks
- CVE-2023-45315 Denial of service in Intel(R) Power Gadget software for Windwos
- CVE-2023-45312 MTProto proxy remote code execution vulnerability
- CVE-2023-45311 Code injection in fsevents
- CVE-2023-4531 SQLi in Mestavs E-commerce Software
- CVE-2023-45303 ThingsBoard Server-Side Template Injection
- CVE-2023-4530 SQLi in Turna Media's Advertising Administration Panel
- CVE-2023-45292 Captcha verification bypass in github.com/mojocn/base64Captcha
- CVE-2023-45290 Memory exhaustion in multipart form parsing in net/textproto and net/http
- CVE-2023-45289 Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
- CVE-2023-45288 HTTP/2 CONTINUATION flood in net/http
- CVE-2023-45287 Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
- CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2
- CVE-2023-45285 Command 'go get' may unexpectedly fallback to insecure git in cmd/go
- CVE-2023-45284 Incorrect detection of reserved device names on Windows in path/filepath
- CVE-2023-45283 Insecure parsing of Windows paths with a \??\ prefix in path/filepath
- CVE-2023-45282 Prototype Pollution in NASA Open MCT
- CVE-2023-45281 Cross-site scripting in spaceapplications:yamcs
- CVE-2023-45280 Yamcs Cross-site Scripting vulnerability
- CVE-2023-4528 JSCAPE MFT Server Unsafe Deserialization on Management Port
- CVE-2023-45279 Yamcs Cross-site Scripting vulnerability
- CVE-2023-45278 Yamcs API Directory Traversal vulnerability
- CVE-2023-45277 Yamcs Path Traversal vulnerability
- CVE-2023-45276 WordPress Automated Editor Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45275 WordPress Contact Form builder with drag & drop plugin <= 2.3.28 - Broken Access Control vulnerability
- CVE-2023-45274 WordPress SendPulse Free Web Push Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45273 WordPress Stout Google Calendar Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45272 WordPress 10Web Map Builder for Google Maps plugin <= 1.0.73 - Notice Dismissal Vulnerability
- CVE-2023-45271 WordPress ProductX – Gutenberg WooCommerce Blocks plugin <= 2.7.8 - Broken Access Control vulnerability
- CVE-2023-45270 WordPress Pinpoint Booking System Plugin <= 2.9.9.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4527 Glibc: stack read overflow in getaddrinfo in no-aaaa mode
- CVE-2023-45269 WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45268 WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45267 WordPress IRivYou Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45256 Multiple SQL injection vulnerabilities in the EuroInformation MoneticoPaiement module before 1.1.1 for PrestaShop allow remote attackers to
- CVE-2023-45253 Privilege escalation in huddly:huddlycameraservices
- CVE-2023-45252 Privilege escalation in huddly:huddlycameraservice
- CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password
- CVE-2023-45248 Privilege escalation in Acronis Cyber Protect 16
- CVE-2023-45247 Missing authorization in Acronis Cyber Protect 16
- CVE-2023-45246 Missing authorization in Acronis Cyber Protect 16
- CVE-2023-45245 Missing authorization in Acronis Agent