Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 213 of 430.
- CVE-2023-45244 Missing authorization in Acronis Cyber Protect 16
- CVE-2023-45243 Missing authorization in Acronis Cyber Protect 17
- CVE-2023-45242 Missing authorization in Acronis Cyber Protect 17
- CVE-2023-45241 Information disclosure in Acronis Cyber Protect 16
- CVE-2023-45240 Missing authorization in Acronis Agent
- CVE-2023-45239 Command injection in tac plus
- CVE-2023-45237 Use of a Weak PseudoRandom Number Generator in EDK II Network Package
- CVE-2023-45236 Predictable TCP ISNs in EDK II Network Package
- CVE-2023-45235 Buffer Overflow in EDK II Network Package
- CVE-2023-45234 Buffer Overflow in EDK II Network Package
- CVE-2023-45233 Infinite loop in EDK II Network Package
- CVE-2023-45232 Infinite loop in EDK II Network Package
- CVE-2023-45231 Out-of-Bounds Read in EDK II Network Package
- CVE-2023-45230 Buffer Overflow in EDK II Network Package
- CVE-2023-4523 Real Time Automation 460 Series Cross-site Scripting
- CVE-2023-45229 Out-of-Bounds Read in EDK II Network Package
- CVE-2023-45228 Sielco Radio Link and Analog FM Transmitters Improper Access Control
- CVE-2023-45227 Westermo Lynx Cross-site Scripting
- CVE-2023-45226 BIG-IP Next SPK SSH vulnerability
- CVE-2023-45225 Zavio IP Camera Stack-Based Buffer Overflow
- CVE-2023-45223 Users full name disclosure through Mattermost Boards with Show Full Name Option disabled
- CVE-2023-45222 Westermo Lynx Cross-site Scripting
- CVE-2023-45221 Memory corruption in Intel(R) Media SDK
- CVE-2023-45220 Weak cryptography in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-4522 Improper Validation of Specified Type of Input in GitLab
- CVE-2023-45219 BIG-IP tmsh vulnerability
- CVE-2023-45217 Privilege escalation in Intel(R) Power Gadget software for Windows
- CVE-2023-45215 Memory corruption in WBR-6013
- CVE-2023-45213 Westermo Lynx Permissive Cross-domain Policy with Untrusted Domains
- CVE-2023-45210 Missing authorization in Pleasanter
- CVE-2023-4521 Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE
- CVE-2023-45209 Information disclosure in Smart Reader
- CVE-2023-45208 Command injection in dlink:dap-1860 firmware
- CVE-2023-45207 Cross-site scripting in zimbra:collaboration
- CVE-2023-45206 Cross-site scripting in zimbra:collaboration
- CVE-2023-45205 Misconfiguration in SICAM PAS/PQS
- CVE-2023-45204 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-45203 Online Examination System v1.0 - Multiple Open Redirects
- CVE-2023-45202 Online Examination System v1.0 - Multiple Open Redirects
- CVE-2023-45201 Online Examination System v1.0 - Multiple Open Redirects
- CVE-2023-4520 Cross-site scripting in FV Flowplayer Video Player
- CVE-2023-45199 Memory corruption in trustedfirmware:mbed tls
- CVE-2023-45198 Information disclosure in netbsd:ftpd
- CVE-2023-45197 Adminer and AdminerEvo vulnerable to directory traversal and file upload
- CVE-2023-45196 Adminer and AdminerEvo denial of service via HTTP redirect
- CVE-2023-45195 Adminer and AdminerEvo SSRF
- CVE-2023-45194 Hardcoded credentials in MR-GM2
- CVE-2023-45193 IBM Db2 denial of service
- CVE-2023-45192 IBM Engineering Requirements Management DOORS Next XML external entity injection
- CVE-2023-45191 IBM Engineering Lifecycle Optimization information disclosure
- CVE-2023-45190 IBM Engineering Lifecycle Optimization HTTP header injection
- CVE-2023-45189 IBM Robotic Process Automation information disclosure
- CVE-2023-45188 IBM Engineering Lifecycle Optimization Publishing file upload
- CVE-2023-45187 IBM Engineering Lifecycle Optimization - Publishing session fixation
- CVE-2023-45186 IBM Sterling B2B Integrator cross-site scripting
- CVE-2023-45185 IBM i Access Client Solutions code execution
- CVE-2023-45184 IBM i Access Client Solutions
- CVE-2023-45182 IBM i Access Client Solutions information disclosure
- CVE-2023-45181 IBM Jazz Foundation cross-site scripting
- CVE-2023-4518 Denial of service in Relion670
- CVE-2023-45178 IBM Db2 denial of service
- CVE-2023-45177 IBM MQ denial of service
- CVE-2023-45176 IBM App Connect Enterprise and IBM Integration Bus denial of service
- CVE-2023-45175 IBM AIX denial of service
- CVE-2023-45174 IBM AIX privilege escalation
- CVE-2023-45173 IBM AIX denial of service
- CVE-2023-45172 IBM AIX denial of service
- CVE-2023-45171 IBM AIX denial of service
- CVE-2023-45170 IBM AIX privilege escalation
- CVE-2023-4517 Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp
- CVE-2023-45169 IBM AIX denial of service
- CVE-2023-45168 IBM AIX command execution
- CVE-2023-45167 IBM AIX denial of service
- CVE-2023-45166 IBM AIX privilege escalation
- CVE-2023-45165 IBM AIX denial of service
- CVE-2023-45163 1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution
- CVE-2023-45162 Blind SQL vulnerability in 1E platform
- CVE-2023-45161 1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution
- CVE-2023-45160 Elevated Temp Directory Execution in 1E Client
- CVE-2023-4516 Missing authorization in IGSS Update Service (IGSSupdateservice.exe)
- CVE-2023-45159 1E Client installer can perform arbitrary file deletion on protected files
- CVE-2023-45158 Command injection in web2py
- CVE-2023-45152 Blind Server Side Request Forgery (SSRF) in remote schedule import feature in Engelsystem
- CVE-2023-45151 OAuth2 client_secret stored in plain text in the Nextcloud database
- CVE-2023-45150 Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive
- CVE-2023-4515 ksmbd: validate command request size
- CVE-2023-45149 Password of talk conversations can be bruteforced in Nextcloud
- CVE-2023-45148 Rate limiter not working reliable when Memcached is installed in Nextcloud
- CVE-2023-45147 Arbitrary keys can be added to a topic's custom fields by any user in Discourse
- CVE-2023-45146 Remote code execution in XXL-RPC
- CVE-2023-45145 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.
- CVE-2023-45144 Remote code execution from login screen through unescaped URL parameter in OAuth Identity XWiki App
- CVE-2023-45143 Undici's cookie header not cleared on cross-origin redirect in fetch
- CVE-2023-45142 OpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics
- CVE-2023-45141 CSRF Token Validation Vulnerability in fiber
- CVE-2023-45140 Group-based JIT MFA bypass on scp and sftp in The Bastion
- CVE-2023-4514 Mmm Simple File List <= 2.3 - Contributor+ Stored XSS
- CVE-2023-45139 fonttools XML External Entity Injection (XXE) Vulnerability
- CVE-2023-45138 Change Request Application vulnerable to XSS and remote code execution through change request title
- CVE-2023-45137 XWiki Platform XSS with edit right in the create document form for existing pages