Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 216 of 430.
- CVE-2023-44760 Concrete CMS Cross-site Scripting vulnerability
- CVE-2023-4476 Locatoraid Store Locator < 3.9.24 - Reflected XSS
- CVE-2023-44758 Cross-site scripting in gdidees:gdidees cms
- CVE-2023-44755 SQL injection in mayurik:sacco management system
- CVE-2023-44753 Cross-site scripting in mayurik:online student management system
- CVE-2023-44752 Auth bypass in oretnom23:student study center desk management system
- CVE-2023-4475 An Arbitrary File Movement vulnerability was found on the ADM
- CVE-2023-4474 Command injection in NAS326 firmware
- CVE-2023-4473 Command injection in NAS326 firmware
- CVE-2023-4472 Cryptographically weak PRNG in Opinio 7.22
- CVE-2023-4471 Order Tracking Pro <= 3.3.6 - Reflected Cross-Site Scripting
- CVE-2023-44709 Integer overflow in sammycage:plutosvg
- CVE-2023-44694 SQL injection in dlink:dar-7000 firmware
- CVE-2023-44693 SQL injection in dlink:dar-7000 firmware
- CVE-2023-44690 mycli has Inadequate Encryption Strength
- CVE-2023-4469 Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-44689 Open redirect in e-Gov Client Application (Windows version)
- CVE-2023-4468 Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization
- CVE-2023-4467 Poly Trio 8800 Test Automation Mode backdoor
- CVE-2023-4466 Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web Interface protection mechanism
- CVE-2023-4465 Poly VVX 601 Configuration File Import unverified password change
- CVE-2023-4464 Poly VVX 601 Diagnostic Telnet Mode os command injection
- CVE-2023-4463 Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP Header denial of service
- CVE-2023-4462 Poly VVX 601 Web Configuration Application random values
- CVE-2023-4460 Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG
- CVE-2023-4459 Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()
- CVE-2023-4458 Kernel: ksmbd: smb2_open out-of-bounds read information disclosure vulnerability
- CVE-2023-4457 Google Sheets data source plugin for Grafana information disclosure vulnerability
- CVE-2023-4456 Openshift-logging: lokistack authorisation is cached too broadly
- CVE-2023-4455 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
- CVE-2023-4454 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
- CVE-2023-4453 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-4452 Web Server Buffer Overflow Vulnerability
- CVE-2023-4451 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
- CVE-2023-4450 jeecgboot JimuReport Template injection
- CVE-2023-4449 SourceCodester Free and Open Source Inventory Management System sql injection
- CVE-2023-44488 Denial of service in debian:debian linux
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2023-44484 Online Blood Donation Management System v1.0 - Stored Cross-Site Scripting (XSS)
- CVE-2023-44483 Apache Santuario: Private Key disclosure in debug-log output
- CVE-2023-44482 Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-44481 Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-44480 Leave Management System Project v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-4448 OpenRapid RapidCMS run-movepass.php password recovery
- CVE-2023-44479 WordPress WP Jump Menu Plugin <= 3.6.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44478 WordPress Events Rich Snippets for Google plugin <= 1.8 - CSRF Leading to Privilege Escalation vulnerability
- CVE-2023-44477 WordPress Cooked Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44476 WordPress CopyRightPro Plugin <= 2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44475 WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44474 WordPress Tiger Forms Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44473 WordPress Table of Contents Plus Plugin <= 2302 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44472 WordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability
- CVE-2023-44471 WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44470 WordPress Kv TinyMCE Editor Add Fonts Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4447 OpenRapid RapidCMS article-chat.php sql injection
- CVE-2023-44469 Server-side request forgery in lemonldap-ng:lemonldap\
- CVE-2023-44467 langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
- CVE-2023-44466 Integer overflow in linux:linux kernel
- CVE-2023-44464 pretix allows Pillow to parse EPS files
- CVE-2023-44463 pretix potential IP address spoofing vulnerability
- CVE-2023-4446 OpenRapid RapidCMS category.php sql injection
- CVE-2023-44452 Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability
- CVE-2023-44451 Linux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-44450 NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability
- CVE-2023-4445 Mini-Tmall sql injection
- CVE-2023-44449 NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability
- CVE-2023-44448 TP-Link Archer A54 libcmm.so dm_fillObjByStr Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44447 TP-Link TL-WR902AC loginFs Improper Authentication Information Disclosure Vulnerability
- CVE-2023-44446 GStreamer MXF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44445 NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44444 GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability
- CVE-2023-44443 GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2023-44442 GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44441 GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44440 Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2023-4444 SourceCodester Free Hospital Management System for Small Practices edit-user.php sql injection
- CVE-2023-44439 Ashlar-Vellum Xenon Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2023-44438 Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2023-44437 Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability
- CVE-2023-44436 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44435 Kofax Power PDF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44434 Kofax Power PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44433 Kofax Power PDF AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44432 Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-44431 BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44430 Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-4443 SourceCodester Free Hospital Management System for Small Practices edit-doc.php sql injection
- CVE-2023-44429 GStreamer AV1 Codec Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44428 MuseScore CAP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44427 D-Link DIR-X3260 SetSysEmailSettings SMTPServerAddress Command Injection Remote Code Execution Vulnerability
- CVE-2023-44426 D-Link DIR-X3260 SetSysEmailSettings AccountPassword Command Injection Remote Code Execution Vulnerability
- CVE-2023-44425 D-Link DIR-X3260 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability
- CVE-2023-44424 D-Link DIR-X3260 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability
- CVE-2023-44423 D-Link DIR-X3260 SetTriggerPPPoEValidate Password Command Injection Remote Code Execution Vulnerability
- CVE-2023-44422 D-Link DIR-X3260 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability
- CVE-2023-44421 D-Link DIR-X3260 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability
- CVE-2023-44420 D-Link DIR-X3260 prog.cgi Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability
- CVE-2023-4442 SourceCodester Free Hospital Management System for Small Practices booking-complete.php sql injection
- CVE-2023-44419 D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44418 D-Link DIR-X3260 Prog.cgi Heap-based Buffer Overflow Remote Code Execution Vulnerability