Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 217 of 430.
- CVE-2023-44417 D-Link DAP-2622 DDP Set IPv4 Address Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44416 D-Link DAP-2622 Telnet CLI Command Injection Remote Code Execution Vulnerability
- CVE-2023-44415 D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability
- CVE-2023-44414 D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2023-44413 D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability
- CVE-2023-44412 D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-44411 D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability
- CVE-2023-44410 D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability
- CVE-2023-4441 SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection
- CVE-2023-44409 D-Link DAP-1325 SetSetupWizardStatus Enabled Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44408 D-Link DAP-1325 SetAPLanSettings IPAddr Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44407 D-Link DAP-1325 SetAPLanSettings Gateway Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44406 D-Link DAP-1325 SetAPLanSettings DeviceName Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44405 D-Link DAP-1325 get_value_of_key Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44404 D-Link DAP-1325 get_value_from_app Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-44403 D-Link DAP-1325 HNAP SetWLanRadioSettings Channel Command Injection Remote Code Execution Vulnerability
- CVE-2023-44402 ASAR Integrity bypass via filetype confusion in electron
- CVE-2023-44401 Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data
- CVE-2023-44400 Uptime Kuma has Persistentent User Sessions
- CVE-2023-4440 SourceCodester Free Hospital Management System for Small Practices appointment.php sql injection
- CVE-2023-44399 ZITADEL's password reset does not respect the "Ignoring unknown usernames" setting
- CVE-2023-44398 Out-of-bounds write in exiv2
- CVE-2023-44397 CloudExplorer Lite permission bypass vulnerability
- CVE-2023-44396 iTop vulnerable to XSS in dashlet modifications ajax endpoints
- CVE-2023-44395 Autolab has Path Traversal vulnerability in Assessment functionality
- CVE-2023-44394 Disclosure of project names to unauthorized users in MantisBT
- CVE-2023-44393 Piwigo Reflected XSS vulnerability
- CVE-2023-44392 Arbitrary code execution vulnerability when using shared Kubernetes cluster
- CVE-2023-44391 Prevent unauthorized access to summary details in Discourse
- CVE-2023-44390 HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content
- CVE-2023-4439 SourceCodester Card Holder Management System Minus Value unknown vulnerability
- CVE-2023-44389 Zope management interface vulnerable to stored cross site scripting via the title property
- CVE-2023-44388 Malicious requests can fill up the log files resulting in a deinal of service in Discourse
- CVE-2023-44387 Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations
- CVE-2023-44386 Incorrect request error handling triggers server crash in Vapor
- CVE-2023-44385 Client-Side Request Forgery in Home Assistant iOS/macOS native Apps
- CVE-2023-44384 Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location
- CVE-2023-44383 October CMS stored XSS by authenticated backend user with improper configuration
- CVE-2023-44382 October CMS safe mode bypass using Twig sandbox escape
- CVE-2023-44381 October CMS safe mode bypass using Page template injection
- CVE-2023-4438 SourceCodester Inventory Management System search_sales_report.php sql injection
- CVE-2023-44379 baserCMS Cross-site Scripting vulnerability in Site search Feature
- CVE-2023-44378 gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition
- CVE-2023-44374 Other in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44373 Code injection in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44372 TALOS-2023-1842 - Adobe Acrobat Reader U3D page event use-after-free vulnerability
- CVE-2023-44371 ZDI-CAN-21998: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-4437 SourceCodester Inventory Management System search_sell_paymen_report.php sql injection
- CVE-2023-44367 ZDI-CAN-21929: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44366 ZDI-CAN-21928: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-44365 ZDI-CAN-21931: Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability
- CVE-2023-44362 ZDI-CAN-21791: Adobe Prelude MP4 File Uninitialized Variable Information Disclosure Vulnerability
- CVE-2023-44361 ZDI-CAN-22041: Adobe Acrobat Reader DC AcroForm Doc Object Use-After-Free Information Disclosure Vulnerability
- CVE-2023-44360 ZDI-CAN-21882: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-4436 SourceCodester Inventory Management System edit_update.php sql injection
- CVE-2023-44359 ZDI-CAN-21936: Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-44358 ZDI-CAN-21971: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44357 ZDI-CAN-21930: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44356 ZDI-CAN-21956: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44355 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2023-44353 ColdFusion WDDX Deserialization Gadgets
- CVE-2023-44352 Unauthenticate Reflected XSS on Adobe Coldfusion 2018 - 2021 - 2023 last version
- CVE-2023-44351 Adobe ColdFusion RCE Security Vulnerability
- CVE-2023-44350 ColdFusion | Deserialization of Untrusted Data (CWE-502)
- CVE-2023-4435 Improper Input Validation in hamza417/inure
- CVE-2023-44348 Memory corruption in Acrobat Reader
- CVE-2023-44347 Adobe InDesign CC 2023 Memory Corruption Vulnerability IX.
- CVE-2023-44346 Adobe InDesign CC 2023 Memory Corruption Vulnerability VIII.
- CVE-2023-44345 Adobe InDesign CC 2023 Memory Corruption Vulnerability VII.
- CVE-2023-44344 Adobe InDesign CC 2023 Memory Corruption Vulnerability V.
- CVE-2023-44343 Adobe InDesign CC 2023 Memory Corruption Vulnerability III.
- CVE-2023-44342 Adobe InDesign CC 2023 Memory Corruption Vulnerability II.
- CVE-2023-44341 Adobe InDesign CC 2023 Memory Corruption Vulnerability I
- CVE-2023-44340 ZDI-CAN-21424: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-4434 Missing Authorization in hamza417/inure
- CVE-2023-44339 ZDI-CAN-21422: Adobe Acrobat Reader DC AcroForm value Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44338 ZDI-CAN-21493: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-44337 ZDI-CAN-21509: Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-44336 TALOS-2023-1794 - Adobe Acrobat Reader Thermometer use-after-free vulnerability
- CVE-2023-44335 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability I.
- CVE-2023-44334 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability VI.
- CVE-2023-44333 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability V.
- CVE-2023-44332 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability II.
- CVE-2023-44331 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability IV.
- CVE-2023-44330 Adobe Photoshop 2023 CC 24.7 Memory Corruption Vulnerability III.
- CVE-2023-4433 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
- CVE-2023-44329 ZDI-CAN-21798: Adobe Bridge MP4 File Parsing Uninitialized Variable Information Disclosure Vulnerability
- CVE-2023-44328 ZDI-CAN-21797: Adobe Bridge MP4 File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-44327 ZDI-CAN-21793: Adobe Bridge MP4 File Uninitialized Variable Information Disclosure Vulnerability
- CVE-2023-44326 ZDI-CAN-21866: Adobe Dimension GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44325 ZDI-CAN-21666: Adobe Animate FLA File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-44324 ZDI-CAN-21344: Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability
- CVE-2023-44323 PDF Jbig2 memory-corruption Vulnerability - MSFT T5
- CVE-2023-44322 Other in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44321 Denial of service in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44320 Other in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-4432 Cross-site Scripting (XSS) - Reflected in cockpit-hq/cockpit
- CVE-2023-44319 Weak cryptography in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44318 Hardcoded credentials in RUGGEDCOM RM1224 LTE(4G) EU
- CVE-2023-44317 Other in RUGGEDCOM RM1224 LTE(4G) EU