Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 224 of 430.
- CVE-2023-43542 Buffer Copy Without Checking Size of Input in Trusted Execution Environment
- CVE-2023-43541 NULL Pointer Dereference in Windows Graphics
- CVE-2023-43540 Buffer Copy Without Checking Size of Input in Bluetooth HOST
- CVE-2023-4354 Memory corruption in Chrome
- CVE-2023-43539 Buffer Over-read in WLAN Firmware
- CVE-2023-43538 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in TZ Secure OS
- CVE-2023-43537 Buffer Over-read in WLAN Host
- CVE-2023-43536 Buffer Over-read in WLAN Firmware
- CVE-2023-43535 Improper Validation of Array Index in Display
- CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST
- CVE-2023-43533 Buffer Over-read in WLAN Firmware
- CVE-2023-43532 Untrusted Pointer Dereference in Display
- CVE-2023-43531 Access of Uninitialized Pointer in SPS Applications
- CVE-2023-43530 Integer Overflow or Wraparound in HLOS
- CVE-2023-4353 Memory corruption in Chrome
- CVE-2023-43529 Reachable Assertion in Data Modem
- CVE-2023-43528 Buffer Over-read in Audio
- CVE-2023-43527 Buffer Over-read in Video
- CVE-2023-43526 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2023-43525 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2023-43524 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
- CVE-2023-43523 Reachable Assertion in WLAN Firmware
- CVE-2023-43522 NULL Pointer Dereference in WLAN Firmware
- CVE-2023-43521 Use After Free in HLOS
- CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST
- CVE-2023-4352 Memory corruption in Chrome
- CVE-2023-43519 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Video
- CVE-2023-43518 Untrusted Pointer Dereference in Video
- CVE-2023-43517 Improper Access Control in Automotive Multimedia
- CVE-2023-43516 Use of out-of-range pointer offset in Video
- CVE-2023-43515 Buffer copy without checking size of input (Classic buffer overflow) in HLOS
- CVE-2023-43514 Use After Free in DSP Services
- CVE-2023-43513 Use of Out-of-range Pointer Offset in PCIe
- CVE-2023-43512 Buffer Over-read in Qualcomm ESL
- CVE-2023-43511 Loop with Unreachable Exit Condition (Infinite Loop) in WLAN Firmware
- CVE-2023-43510 Command injection in Aruba ClearPass Policy Manager
- CVE-2023-4351 Use after free in Chrome
- CVE-2023-43509 Unauthenticated Endpoint Allows Sending Arbitrary OnGuard Notifications
- CVE-2023-43508 Authorization Bypass Leading to Privilege Escalation in ClearPass Policy Manager Web-Based Management Interface
- CVE-2023-43507 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
- CVE-2023-43506 Local Privilege Escalation in ClearPass OnGuard Linux Agent
- CVE-2023-43505 Missing authorization in COMOS
- CVE-2023-43504 Memory corruption in COMOS
- CVE-2023-43503 Information disclosure in COMOS
- CVE-2023-43502 Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-43501 Jenkins Build Failure Analyzer Plugin missing permission check
- CVE-2023-43500 Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-4350 Other in Chrome
- CVE-2023-43499 Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
- CVE-2023-43498 Jenkins temporary uploaded file created with insecure permissions
- CVE-2023-43497 Jenkins temporary uploaded file created with insecure permissions
- CVE-2023-43496 Jenkins temporary plugin file created with insecure permissions
- CVE-2023-43495 Jenkins Cross-site Scripting vulnerability
- CVE-2023-43494 Jenkins does not exclude sensitive build variables from search
- CVE-2023-43493 SQL injection in Welcart e-Commerce
- CVE-2023-43492 Weintek cMT3000 HMI Web CGI Stack-based Buffer Overflow
- CVE-2023-43491 Information disclosure in Smart Reader
- CVE-2023-43490 Weak cryptography in Intel(R) Xeon(R) D Processors with Intel(R) SGX
- CVE-2023-4349 Use after free in Chrome
- CVE-2023-43489 Missing authorization in Intel(R) CIP software
- CVE-2023-43488 Missing authorization in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-43487 Missing authorization in Intel(R) CST
- CVE-2023-43485 BIGIP and BIG-IQ TACACS+ audit log Vulnerability
- CVE-2023-43484 Cross-site scripting in Welcart e-Commerce
- CVE-2023-43482 Command injection in ER7206 Omada Gigabit VPN Router
- CVE-2023-43481 Code injection in tcl:browser tv web - browsehere
- CVE-2023-43478 Unauthenticated configuration restore and firmware update
- CVE-2023-43477 Post-Auth Command Injection in Telstra Smart Modem Gen 2 (Arcadyan LH1000)
- CVE-2023-43472 Information exposure in MLflow
- CVE-2023-43470 SQL injection in janobe:online voting system
- CVE-2023-4347 Cross-site Scripting (XSS) - Reflected in librenms/librenms
- CVE-2023-43469 SQL injection in online job portal project:online job portal
- CVE-2023-43468 SQL injection in online job portal project:online job portal
- CVE-2023-4346 KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism
- CVE-2023-43458 Cross-site scripting in resort reservation system project:resort reservation system
- CVE-2023-43457 Privilege escalation in oretnom23:service provider management system
- CVE-2023-43456 Cross-site scripting in oretnom23:service provider management system
- CVE-2023-43455 Command injection in totolink:x6000r firmware
- CVE-2023-43454 Command injection in totolink:x6000r firmware
- CVE-2023-43453 Command injection in totolink:x6000r firmware
- CVE-2023-4345 Broadcom RAID Controller web interface is vulnerable client-side control bypass
- CVE-2023-43449 Code injection in hummerrisk:hummerrisk
- CVE-2023-4344 Weak cryptography in LSI Storage Authority (LSA)
- CVE-2023-4343 Information disclosure in LSI Storage Authority (LSA)
- CVE-2023-4342 Misconfiguration in LSI Storage Authority (LSA)
- CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
- CVE-2023-4340 Privilege escalation in LSI Storage Authority (LSA)
- CVE-2023-4339 Information disclosure in LSI Storage Authority (LSA)
- CVE-2023-43382 Path traversal in iteachyou:dreamer cms
- CVE-2023-43381 SQL injection in tianchoy:blog
- CVE-2023-4338 Misconfiguration in LSI Storage Authority (LSA)
- CVE-2023-43378 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2023-43377 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2023-43376 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2023-43375 SQL injection in digitaldruid:hoteldruid
- CVE-2023-43374 SQL injection in digitaldruid:hoteldruid
- CVE-2023-43373 SQL injection in digitaldruid:hoteldruid
- CVE-2023-43371 SQL injection in digitaldruid:hoteldruid
- CVE-2023-4337 Other in LSI Storage Authority (LSA)
- CVE-2023-43364 Searchor CLI's Search vulnerable to Arbitrary Code using Eval