Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 222 of 430.
- CVE-2023-43787 Libx11: integer overflow in xcreateimage() leading to a heap overflow
- CVE-2023-43786 Libx11: stack exhaustion from infinite recursion in putsubimage()
- CVE-2023-43785 Libx11: out-of-bounds memory access in _xkbreadkeysyms()
- CVE-2023-43784 Information disclosure in plesk:onyx
- CVE-2023-43783 Other in falktx:cadence
- CVE-2023-43782 Other in falktx:cadence
- CVE-2023-4378 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-43777 Insecure storage of password in easySoft
- CVE-2023-43776 Weak encoding vulnerability in easyE4
- CVE-2023-43775 Security issue in SMP Gateway automation platform
- CVE-2023-43771 Denial of service in mikebrady:not quite ptp
- CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS)
- CVE-2023-43769 Misconfiguration in couchbase:couchbase server
- CVE-2023-43768 Denial of service in couchbase:couchbase server
- CVE-2023-43767 Denial of service in f-secure:atlant
- CVE-2023-43766 Privilege escalation in f-secure:atlant
- CVE-2023-43765 Denial of service in f-secure:atlant
- CVE-2023-43763 Cross-site scripting in withsecure:f-secure policy manager
- CVE-2023-43762 Other in withsecure:f-secure policy manager
- CVE-2023-43761 Denial of service in f-secure:atlant
- CVE-2023-43760 Denial of service in f-secure:atlant
- CVE-2023-4376 Serial Codes Generator and Validator with WooCommerce Support < 2.4.15 - Admin+ Stored XSS
- CVE-2023-43758 Privilege escalation in Intel(R) processors
- CVE-2023-43757 Weak cryptography in LAN-W300N/P
- CVE-2023-43756 Dsoftbus has an out-of-bounds read vulnerability
- CVE-2023-43755 Zavio IP Camera Stack-Based Buffer Overflow
- CVE-2023-43754 Permalink previews displayed for posts in archived channels even if users are disallowed to view archived channels
- CVE-2023-43753 Information disclosure in Intel(R) Processors with Intel(R) SGX
- CVE-2023-43752 Command injection in WRC-X3000GS2-B
- CVE-2023-43751 Privilege escalation in Intel(R) Graphics Windows DCH driver software
- CVE-2023-43748 Privilege escalation in Intel(R) GPA Framework software installers
- CVE-2023-43747 Misconfiguration in Intel(R) Connectivity Performance Suite software installers
- CVE-2023-43746 BIG-IP Appliance mode external monitor vulnerability
- CVE-2023-43745 Denial of service in Intel(R) CBI software
- CVE-2023-43744 Command injection in zultys:mx-e firmware
- CVE-2023-43743 SQL injection in zultys:mx-e firmware
- CVE-2023-43742 Auth bypass in zultys:mx-e firmware
- CVE-2023-43741 Buildkite Elastic CI for AWS time-of-check-time-of-use race condition vulnerability
- CVE-2023-43740 Online Book Store Project v1.0 - Insecure File Upload
- CVE-2023-4374 WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View
- CVE-2023-43739 Online Book Store Project v1.0 - Unauthenticated SQL Injection (SQLi)
- CVE-2023-43735 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43734 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43733 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43732 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43731 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43730 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-4373 Missing authorization in Remote Desktop Manager
- CVE-2023-43729 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43728 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43727 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43726 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43725 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43724 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43723 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43722 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43721 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43720 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-4372 LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-43719 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43718 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43717 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43716 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43715 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43714 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43713 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43712 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43711 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43710 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-4371 phpRecDB index.php cross site scripting
- CVE-2023-43709 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43708 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43707 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43706 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43705 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43704 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43703 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43702 Os Commerce 4.12.56860 - Cross Site Scripting Reflected (XSS)
- CVE-2023-43701 Apache Superset: Stored XSS on API endpoint
- CVE-2023-43700 Missing authorization in APU0200
- CVE-2023-43699 Auth bypass in APU0200
- CVE-2023-43698 Cross-site scripting in APU0200
- CVE-2023-43697 Other in APU0200
- CVE-2023-43696 Missing authorization in APU0200
- CVE-2023-43694 An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before (and Nebula 2020-10-21 and later).
- CVE-2023-43692 An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2023-4369 Security feature bypass in Chrome
- CVE-2023-43688 An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later).
- CVE-2023-43687 An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2023-43686 An issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later).
- CVE-2023-43683 An issue was discovered in Malwarebytes 4.6.14.326 and before 5.1.5.116 (and Nebula 2020-10-21 and later).
- CVE-2023-4368 Security feature bypass in Chrome
- CVE-2023-4367 Security feature bypass in Chrome
- CVE-2023-43669 Tungstenite allows remote attackers to cause a denial of service
- CVE-2023-43668 Apache InLong: Jdbc Connection Security Bypass in InLong
- CVE-2023-43667 Apache InLong: Log Injection in Global functions
- CVE-2023-43666 Apache InLong: General user Unauthorized access User Management
- CVE-2023-43665 Django Denial-of-service in django.utils.text.Truncator
- CVE-2023-43664 Employee without any access rights can list all installed modules in Prestashop
- CVE-2023-43663 Improper Privilege Management in Prestashop