Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 221 of 430.
- CVE-2023-43909 SQL injection in hospital management system project:hospital management system
- CVE-2023-43907 Memory corruption in optipng project:optipng
- CVE-2023-43906 Cross-site scripting in onworks:xolo cms
- CVE-2023-43905 Information disclosure in writercms:writercms
- CVE-2023-43902 Auth bypass in emudhra:emsigner
- CVE-2023-43901 Missing authorization in emudhra:emsigner
- CVE-2023-43900 Missing authorization in emudhra:emsigner
- CVE-2023-4390 Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
- CVE-2023-43899 SQL injection in hansuncms project:hansuncms
- CVE-2023-43898 Null dereference in nothings:stb image.h
- CVE-2023-43896 Memory corruption in macrium:reflect
- CVE-2023-43893 Command injection in netis-systems:n3m firmware
- CVE-2023-43892 Command injection in netis-systems:n3m firmware
- CVE-2023-43891 Command injection in netis-systems:n3m firmware
- CVE-2023-43890 Command injection in netis-systems:n3m firmware
- CVE-2023-4389 Kernel: btrfs: double free in btrfs_get_root_ref()
- CVE-2023-43887 Memory corruption in struktur:libde265
- CVE-2023-43886 Memory corruption in tenda:rx9 pro firmware
- CVE-2023-43885 Denial of service in tenda:rx9 pro firmware
- CVE-2023-43884 Subrion CMS Cross-site Scripting vulnerability
- CVE-2023-4388 EventON < 2.2 - Admin+ Stored XSS
- CVE-2023-43879 Cross-site scripting in ritecms:ritecms
- CVE-2023-43878 Cross-site scripting in ritecms:ritecms
- CVE-2023-43877 Cross-site scripting in ritecms:ritecms
- CVE-2023-43876 Cross-site scripting in octobercms:october
- CVE-2023-43875 Subrion CMS vulnerable to Cross-site Scripting
- CVE-2023-43874 Cross-site scripting in e107:e107 cms
- CVE-2023-43873 Cross-site scripting in e107:e107 cms
- CVE-2023-43872 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43871 Cross-site scripting in wbce:wbce cms
- CVE-2023-43870 Hardcoded credentials in Net2
- CVE-2023-4387 Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()
- CVE-2023-43869 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43868 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43867 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43866 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43865 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43864 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43863 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43862 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43861 Memory corruption in dlink:dir-619l firmware
- CVE-2023-43860 Memory corruption in dlink:dir-619l firmware
- CVE-2023-4386 Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
- CVE-2023-43857 Cross-site scripting in iteachyou:dreamer cms
- CVE-2023-43856 Path traversal in iteachyou:dreamer cms
- CVE-2023-43850 Denial of service in aten:pe6208 firmware
- CVE-2023-4385 Kernel: jfs: null pointer dereference in dbfree()
- CVE-2023-43849 Missing authorization in aten:pe6208 firmware
- CVE-2023-43848 Missing authorization in aten:pe6208 firmware
- CVE-2023-43847 Missing authorization in aten:pe6208 firmware
- CVE-2023-43846 Missing authorization in aten:pe6208 firmware
- CVE-2023-43845 Hardcoded credentials in aten:pe6208 firmware
- CVE-2023-43844 Hardcoded credentials in aten:pe6208 firmware
- CVE-2023-43843 Information disclosure in aten:pe6208 firmware
- CVE-2023-43842 Missing authorization in aten:pe6208 firmware
- CVE-2023-4384 MaximaTech Portal Executivo Cookie missing encryption
- CVE-2023-43838 File upload in personal-management-system:personal management system
- CVE-2023-43836 SQL injection in jizhicms:jizhicms
- CVE-2023-43835 Code injection in superstorefinder:super store finder
- CVE-2023-43830 Subrion CMS XSS in /panel/configuration/financial/
- CVE-2023-4383 MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissions
- CVE-2023-43828 Subrion CMS Cross-site Scripting vulnerability in /panel/languages
- CVE-2023-43826 Apache Guacamole: Integer overflow in handling of VNC image buffers
- CVE-2023-43825 Path traversal in Shihonkanri Plus
- CVE-2023-43824 Delta Electronics Delta Industrial Automation DOPSoft DPS File wTitleTextLen Buffer Overflow Remote Code Execution
- CVE-2023-43823 Delta Electronics Delta Industrial Automation DOPSoft DPS File wTTitleLen Buffer Overflow Remote Code Execution
- CVE-2023-43822 Delta Electronics Delta Industrial Automation DOPSoft DPS File wLogTitlesTimeLen Buffer Overflow Remote Code Execution
- CVE-2023-43821 Memory corruption in DOPSoft
- CVE-2023-43820 Memory corruption in DOPSoft
- CVE-2023-4382 tdevs Hyip Rio Profile Settings settings cross site scripting
- CVE-2023-43819 Delta Electronics Delta Industrial Automation DOPSoft DPS File InitialMacroLen Buffer Overflow Remote Code Execution
- CVE-2023-43818 Delta Electronics Delta Industrial Automation DOPSoft DPS File wTextLen Buffer Overflow Remote Code Execution
- CVE-2023-43817 Delta Electronics Delta Industrial Automation DOPSoft DPS File wMailContentLen Buffer Overflow Remote Code Execution
- CVE-2023-43816 Delta Electronics Delta Industrial Automation DOPSoft DPS File wKPFStringLen Buffer Overflow Remote Code Execution
- CVE-2023-43815 Delta Electronics Delta Industrial Automation DOPSoft DPS File wScreenDESCTextLen Buffer Overflow Remote Code Execution
- CVE-2023-43814 Exposure of poll options and votes to unauthorized users in Discourse
- CVE-2023-43813 glpi Authenticated SQL Injection
- CVE-2023-43810 opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
- CVE-2023-4381 Unverified Password Change in instantsoft/icms2
- CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled
- CVE-2023-43805 Nexkey allows users to bypass authentication of Bull dashboard
- CVE-2023-43804 `Cookie` HTTP header isn't stripped on cross-origin redirects
- CVE-2023-43803 Path traversal in Arduino Create Agent
- CVE-2023-43802 Path traversal in Arduino Create Agent
- CVE-2023-43801 Path traversal in Arduino Create Agent
- CVE-2023-43800 Insufficient Verification of Data Authenticity in Arduino Create Agent
- CVE-2023-4380 Platform: token exposed at importing project
- CVE-2023-43799 The Altair Desktop Client Does Not Sanitize External URLs before passing them to the underlying system
- CVE-2023-43798 BigBlueButton Blind SSRF When Uploading Presentation (mitigation bypass)
- CVE-2023-43797 BigBlueButton Stored Cross-site Scripting vulnerability at Guest Lobby
- CVE-2023-43796 Synapse vulnerable to leak of remote user device information
- CVE-2023-43795 WPS Server Side Request Forgery in GeoServer
- CVE-2023-43794 SQL Injection in nocodb
- CVE-2023-43793 Misskey allows users to bypass authentication of Bull dashboard
- CVE-2023-43792 baserCMS Code Injection Vulnerability in Mail Form Feature
- CVE-2023-43791 Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
- CVE-2023-43790 iTop vulnerable to XSS in friendlyname in object details
- CVE-2023-4379 Incorrect Authorization in GitLab
- CVE-2023-43789 Libxpm: out of bounds read on xpm with corrupted colormap
- CVE-2023-43788 Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()