Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 219 of 430.
- CVE-2023-4421 Weak cryptography in NSS
- CVE-2023-44209 Privilege escalation in Acronis Cyber Protect 17
- CVE-2023-44208 Missing authorization in Acronis Cyber Protect Home Office
- CVE-2023-44207 Cross-site scripting in Acronis Cyber Protect 15
- CVE-2023-44206 Missing authorization in Acronis Cyber Protect 15
- CVE-2023-44205 Missing authorization in Acronis Cyber Protect 15
- CVE-2023-44204 Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message
- CVE-2023-44203 Denial of service in Junos OS
- CVE-2023-44201 Information disclosure in Junos OS
- CVE-2023-4420 Weak cryptography in LMS5xx
- CVE-2023-44199 Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
- CVE-2023-44198 Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
- CVE-2023-44197 Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes
- CVE-2023-44196 Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE
- CVE-2023-44195 Junos OS Evolved: Packets which are not destined to the router can reach the RE
- CVE-2023-44194 Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges
- CVE-2023-44193 Denial of service in Junos OS
- CVE-2023-44192 Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP
- CVE-2023-44191 Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging
- CVE-2023-44190 Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability
- CVE-2023-4419 Hardcoded credentials in LMS5xx
- CVE-2023-44189 Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability
- CVE-2023-44188 Junos OS: jkdsd crash due to multiple telemetry requests
- CVE-2023-44187 Junos OS Evolved: 'file copy' CLI command can disclose password to shell users
- CVE-2023-44186 Denial of service in Junos OS
- CVE-2023-44185 Denial of service in Junos OS
- CVE-2023-44184 Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
- CVE-2023-44183 Denial of service in Junos OS
- CVE-2023-44182 Privilege escalation in Junos OS
- CVE-2023-44181 Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
- CVE-2023-4418 Denial of service in LMS5xx
- CVE-2023-44178 Junos OS : Stack overflow vulnerability in CLI command processing
- CVE-2023-44177 Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing
- CVE-2023-44176 Junos OS : Stack overflow vulnerability in CLI command processing
- CVE-2023-44175 Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
- CVE-2023-44174 Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)
- CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)
- CVE-2023-44172 Path traversal in seacms:seacms
- CVE-2023-44171 Path traversal in seacms:seacms
- CVE-2023-44170 Path traversal in seacms:seacms
- CVE-2023-4417 Missing authorization in Remote Desktop Manager
- CVE-2023-44169 Path traversal in seacms:seacms
- CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-44164 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-44163 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-44161 Cross-site request forgery in Acronis Cyber Protect 15
- CVE-2023-44160 Cross-site request forgery in Acronis Cyber Protect 15
- CVE-2023-44159 Information disclosure in Acronis Cyber Protect 15
- CVE-2023-44158 Information disclosure in Acronis Cyber Protect 15
- CVE-2023-44157 Privilege escalation in Acronis Cyber Protect 15
- CVE-2023-44156 Information disclosure in Acronis Cyber Protect 15
- CVE-2023-44155 Information disclosure in Acronis Cyber Protect 15
- CVE-2023-44154 Missing authorization in Acronis Cyber Protect 15
- CVE-2023-44153 Information disclosure in Acronis Cyber Protect 15
- CVE-2023-44152 Auth bypass in Acronis Cyber Protect 15
- CVE-2023-44151 WordPress Pre-Publish Checklist plugin <= 1.1.1 - Broken Access Control vulnerability
- CVE-2023-44150 WordPress ProfilePress Plugin <= 4.13.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-4415 Ruijie RG-EW1200G login improper authentication
- CVE-2023-44149 WordPress Brands for WooCommerce plugin <= 3.8.2.2 - Broken Access Control vulnerability
- CVE-2023-44148 WordPress Astra Bulk Edit plugin <= 1.2.7 - Broken Access Control vulnerability
- CVE-2023-44147 WordPress Comment Blacklist Updater plugin <= 1.1.0 - Broken Access Control vulnerability
- CVE-2023-44146 WordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-44145 WordPress Anchor Episodes Index (Spotify for Podcasters) Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44144 Cross-site scripting in Payment gateway per Product for WooCommerce
- CVE-2023-44143 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-44142 WordPress Inactive Logout plugin <= 3.2.2 - Broken Access Control vulnerability
- CVE-2023-44141 Code injection in Inkdrop
- CVE-2023-4414 Byzoro Smart S85F Management Platform decodmail.php command injection
- CVE-2023-44129 Messaging - Gaining access to arbitrary content providers via QClipIntentReceiverActivity
- CVE-2023-44128 LGInstallService - Deletion of arbitrary files with system privilege
- CVE-2023-44127 Call management - Implicit activity intents disclose contact details and phone numbers
- CVE-2023-44126 Call management - Implicit intents disclose telephony data such as phone numbers, call states, contacts
- CVE-2023-44125 Personalized service - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking
- CVE-2023-44124 Screen recording - Theft of arbitrary files with system privilege
- CVE-2023-44123 Bluetooth - Theft and (over-)write of arbitrary files with system privilege via PendingIntent hijacking
- CVE-2023-44122 LockScreenSettings - Theft arbitrary files with system privilege
- CVE-2023-44121 LG ThinQ Service - Intent redirection with system privilege/LaunchAnyWhere
- CVE-2023-44120 Privilege escalation in Spectrum Power 7
- CVE-2023-4412 TOTOLINK EX1200L setWanCfg os command injection
- CVE-2023-44119 Race condition in EMUI
- CVE-2023-44118 Missing authorization in EMUI
- CVE-2023-44117 Security feature bypass in EMUI
- CVE-2023-44116 Missing authorization in EMUI
- CVE-2023-44115 Missing authorization in EMUI
- CVE-2023-44114 Memory corruption in EMUI
- CVE-2023-44113 Missing authorization in EMUI
- CVE-2023-44112 Memory corruption in EMUI
- CVE-2023-44111 Auth bypass in EMUI
- CVE-2023-44110 Memory corruption in EMUI
- CVE-2023-4411 TOTOLINK EX1200L setTracerouteCfg os command injection
- CVE-2023-44109 Other in EMUI
- CVE-2023-44108 Memory corruption in EMUI
- CVE-2023-44107 Other in HarmonyOS
- CVE-2023-44106 Privilege escalation in EMUI
- CVE-2023-44105 Missing authorization in EMUI
- CVE-2023-44104 Missing authorization in EMUI
- CVE-2023-44103 Memory corruption in EMUI
- CVE-2023-44102 Missing authorization in EMUI
- CVE-2023-44101 Missing authorization in HarmonyOS
- CVE-2023-44100 Missing authorization in EMUI