Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 223 of 430.
- CVE-2023-43662 Arbitrary file read vulnerability in Shoko Server
- CVE-2023-43661 Cachet vulnerable to Authenticated Remote Code Execution
- CVE-2023-43660 SSH key password bypassed in warpgate
- CVE-2023-4366 Use after free in Chrome
- CVE-2023-43659 Cross-site Scripting via email preview when CSP disabled in Discourse
- CVE-2023-43658 Improper escaping of user input in discourse-calendar
- CVE-2023-43657 Improper escaping of encrypted topic titles can lead to Cross-site Scripting under non-default site configuration
- CVE-2023-43656 Sandbox escape for instances that have enabled transformation functions in matrix-hookshot
- CVE-2023-43655 Remote Code Execution via web-accessible composer.phar
- CVE-2023-43654 TorchServe Server-Side Request Forgery
- CVE-2023-43652 Non-MFA account takeover via using only SSH public key to login in jumpserver
- CVE-2023-43651 Remote code execution on the host system via MongoDB shell in jumpserver
- CVE-2023-43650 Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver
- CVE-2023-4365 Security feature bypass in Chrome
- CVE-2023-43649 baserCMS CSRF vulnerability in Content preview Feature
- CVE-2023-43648 baserCMS Directory Traversal vulnerability in Form submission data management Feature
- CVE-2023-43647 baserCMS Cross-site Scripting vulnerability in File upload Feature
- CVE-2023-43646 Inefficient Regular Expression Complexity in get-func-name
- CVE-2023-43645 Denial of service from circular relationship definitions in OpenFGA
- CVE-2023-43644 Improper authentication in the SOCKS5 inbound in sing-box
- CVE-2023-43643 mXSS in AntiSamy
- CVE-2023-43642 Missing upper bound check on chunk length in snappy-java
- CVE-2023-43641 libcue vulnerable to out-of-bounds array access
- CVE-2023-43640 TaxonWorks SQL injection vulnerability
- CVE-2023-4364 Security feature bypass in Chrome
- CVE-2023-43637 Vault Key Partially Predetermined
- CVE-2023-43636 Rootfs Not Protected
- CVE-2023-43635 Vault Key Sealed With SHA1 PCRs
- CVE-2023-43634 Config Partition Not Protected by Measured Boot
- CVE-2023-43633 Debug Functions Unlockable Without Triggering Measured Boot
- CVE-2023-43632 Freely Allocate Buffer on The Stack With Data From Socket
- CVE-2023-43631 SSH as Root Unlockable Without Triggering Measured Boot
- CVE-2023-43630 Config Partition Not Measured From 2 Fronts
- CVE-2023-4363 Security feature bypass in Chrome
- CVE-2023-43629 Misconfiguration in Intel(R) GPA software installers
- CVE-2023-43628 Integer overflow in GPSd
- CVE-2023-43627 Path traversal in ACERA 1310
- CVE-2023-43626 Privilege escalation in UEFI firmware for some Intel(R) Processors
- CVE-2023-43625 Code injection in Simcenter Amesim
- CVE-2023-43624 XML external entity in CX-Designer
- CVE-2023-43623 Information disclosure in Mendix Forgot Password (Mendix 10 compatible)
- CVE-2023-43622 Apache HTTP Server: DoS in HTTP/2 with initial windows size 0
- CVE-2023-43621 Croc may expose secret to local users
- CVE-2023-43620 Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
- CVE-2023-4362 Memory corruption in Chrome
- CVE-2023-43619 Croc sender may send dangerous new files to receiver
- CVE-2023-43618 Croc requires senders to provide local IP addresses in cleartext
- CVE-2023-43617 Cros secrets may be disclosed to untrusted relay
- CVE-2023-43616 Sender can cause a receiver to overwrite files during ZIP extraction in Croc
- CVE-2023-43615 Memory corruption in arm:mbed tls
- CVE-2023-43614 Cross-site scripting in Welcart e-Commerce
- CVE-2023-43612 Hiview has an improper preservation of permissions vulnerability
- CVE-2023-43611 BIG-IP Edge Client for macOS vulnerability
- CVE-2023-43610 SQL injection in Welcart e-Commerce
- CVE-2023-4361 Security feature bypass in Chrome
- CVE-2023-43609 Emerson Rosemount GC370XA, GC700XA, GC1500XA Improper Authorization
- CVE-2023-43608 Security feature bypass in Buildroot
- CVE-2023-4360 Security feature bypass in Chrome
- CVE-2023-43591 Privilege escalation in Zoom Rooms for macOS
- CVE-2023-43590 Privilege escalation in Zoom Rooms for macOS
- CVE-2023-4359 Security feature bypass in Chrome
- CVE-2023-43588 Information disclosure in Zoom Clients
- CVE-2023-43586 Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows
- CVE-2023-43585 Information disclosure in Zoom Mobile App for iOS and SDKs for iOS
- CVE-2023-43583 Hardcoded credentials in Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDK
- CVE-2023-43582 Privilege escalation in Zoom Clients
- CVE-2023-43581 Memory corruption in Desktop BIOS
- CVE-2023-43580 Memory corruption in Desktop BIOS
- CVE-2023-4358 Use after free in Chrome
- CVE-2023-43579 Memory corruption in Desktop BIOS
- CVE-2023-43578 Memory corruption in Desktop BIOS
- CVE-2023-43577 Memory corruption in Desktop BIOS
- CVE-2023-43576 Memory corruption in Desktop BIOS
- CVE-2023-43575 Memory corruption in Desktop BIOS
- CVE-2023-43574 Memory corruption in Desktop BIOS
- CVE-2023-43573 Memory corruption in Desktop BIOS
- CVE-2023-43572 Memory corruption in Desktop BIOS
- CVE-2023-43571 Memory corruption in Desktop BIOS
- CVE-2023-43570 Code injection in Desktop BIOS
- CVE-2023-4357 Security feature bypass in Chrome
- CVE-2023-43569 Memory corruption in Desktop BIOS
- CVE-2023-43568 Memory corruption in Desktop BIOS
- CVE-2023-43567 Memory corruption in Desktop BIOS
- CVE-2023-43566 Cross-site scripting in TeamCity
- CVE-2023-4356 Use after free in Chrome
- CVE-2023-43556 Buffer Copy Without Checking Size of Input in Hypervisor
- CVE-2023-43555 Buffer Over-read in Video
- CVE-2023-43554 Improper Restriction of Operations withing the Bounds of a Memory Buffer in DSP Services
- CVE-2023-43553 Use of Out-of-range Pointer Offset in WLAN HOST
- CVE-2023-43552 Use After Free in WLAN Host Communication
- CVE-2023-43551 Improper Authentication in Multi-Mode Call Processor
- CVE-2023-43550 Integer Overflow or Wraparound in Core Services
- CVE-2023-4355 Memory corruption in Chrome
- CVE-2023-43549 Stack-based Buffer Overflow in WLAN HAL
- CVE-2023-43548 Buffer Copy Without Checking Size of Input in Video
- CVE-2023-43547 Use After Free in Automotive Multimedia
- CVE-2023-43546 Use After Free in Automotive Multimedia
- CVE-2023-43545 Integer Overflow or Wraparound in WLAN HOST
- CVE-2023-43544 Use After Free in Audio
- CVE-2023-43543 Use After Free in Audio