Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 225 of 430.
- CVE-2023-43361 Memory corruption in xiph:vorbis-tools
- CVE-2023-43360 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-4336 Misconfiguration in LSI Storage Authority (LSA)
- CVE-2023-43359 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43358 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43357 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43356 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43355 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43354 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43353 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43352 Code injection in cmsmadesimple:cms made simple
- CVE-2023-4335 Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
- CVE-2023-43346 Cross-site scripting in opensolution:quick cms
- CVE-2023-43345 Cross-site scripting in opensolution:quick cms
- CVE-2023-43344 Cross-site scripting in opensolution:quick cms
- CVE-2023-43343 Cross-site scripting in opensolution:quick cms
- CVE-2023-43342 Cross-site scripting in opensolution:quick cms
- CVE-2023-43341 Evolution CMS Cross-site Scripting vulnerability
- CVE-2023-43340 Evolution CMS Cross-site Scripting vulnerability
- CVE-2023-4334 Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
- CVE-2023-43339 Cross-site scripting in cmsmadesimple:cms made simple
- CVE-2023-43338 Memory corruption in cesanta:mjs
- CVE-2023-43336 Missing authorization in sangoma:freepbx
- CVE-2023-43331 Cross-site scripting in small crm project:small crm
- CVE-2023-4333 Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
- CVE-2023-43326 Cross-site scripting in moosocial:moosocial
- CVE-2023-43325 Cross-site scripting in moosocial:moosocial
- CVE-2023-43323 Server-side request forgery in moosocial:moosocial
- CVE-2023-43322 Command injection in zpesystems:nodegrid os
- CVE-2023-43321 File upload in dcnetworks:dcfw-1800-sdc firmware
- CVE-2023-43320 Auth bypass in proxmox:backup server
- CVE-2023-4332 Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
- CVE-2023-43319 Cross-site scripting in icewarp:webclient
- CVE-2023-43318 Privilege escalation in tp-link:tl-sg2210p firmware
- CVE-2023-43317 Privilege escalation in coign:coign
- CVE-2023-43314 Memory corruption in PMG2005-T20B
- CVE-2023-4331 Weak cryptography in LSI Storage Authority (LSA)
- CVE-2023-43309 Cross-site scripting in webmin:webmin
- CVE-2023-43305 Information disclosure in linecorp:line
- CVE-2023-43304 Information disclosure in linecorp:line
- CVE-2023-43303 Information disclosure in linecorp:line
- CVE-2023-43302 Information disclosure in linecorp:line
- CVE-2023-43301 Information disclosure in linecorp:line
- CVE-2023-43300 Information disclosure in linecorp:line
- CVE-2023-43299 Information disclosure in linecorp:line
- CVE-2023-43298 Information disclosure in linecorp:line
- CVE-2023-43297 Information disclosure in linecorp:line
- CVE-2023-43295 Cross-site request forgery in clickstudios:passwordstate
- CVE-2023-43292 Cross-site scripting in rems:my food recipe
- CVE-2023-43291 Deserialization in emlog:emlog
- CVE-2023-4329 Misconfiguration in LSI Storage Authority (LSA)
- CVE-2023-43284 Code injection in dlink:dir-846 firmware
- CVE-2023-43281 Memory corruption in nothings:stb image.h
- CVE-2023-4328 Information disclosure in LSI Storage Authority (LSA)
- CVE-2023-43279 Null dereference in broadcom:tcpreplay
- CVE-2023-43278 Cross-site request forgery in seacms:seacms
- CVE-2023-43275 Cross-site request forgery in dedecms:dedecms
- CVE-2023-43274 SQL injection in phpjabbers:php shopping cart
- CVE-2023-43271 Missing authorization in 70mai:a500s firmware
- CVE-2023-43270 Code injection in dst-admin project:dst-admin
- CVE-2023-4327 Information disclosure in LSI Storage Authority (LSA)
- CVE-2023-43269 File upload in pigcms:pigcms
- CVE-2023-43268 Deserialization in deyue remote vehicle management system project:deyue remote vehicle management system
- CVE-2023-43267 Cross-site scripting in emlog:emlog
- CVE-2023-43263 Cross-site scripting in froala:froala editor
- CVE-2023-43261 Information disclosure in milesight:ur32 firmware
- CVE-2023-43260 Cross-site scripting in milesight:ur32 firmware
- CVE-2023-4326 Weak cryptography in LSI Storage Authority (LSA)
- CVE-2023-43256 Path traversal in gladysassistant:gladys assistant
- CVE-2023-43252 Memory corruption in xnview:nconvert
- CVE-2023-43251 Memory corruption in xnview:nconvert
- CVE-2023-43250 Memory corruption in xnview:nconvert
- CVE-2023-4325 Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
- CVE-2023-43242 Memory corruption in dlink:dir-816a2 firmware
- CVE-2023-43241 Memory corruption in dlink:dir-823g firmware
- CVE-2023-43240 Memory corruption in dlink:dir-816 a2 firmware
- CVE-2023-4324 Misconfiguration in LSI Storage Authority (LSA)
- CVE-2023-43239 Memory corruption in dlink:dir-816 a2 firmware
- CVE-2023-43238 Memory corruption in dlink:dir-816 a2 firmware
- CVE-2023-43237 Memory corruption in dlink:dir-816 a2 firmware
- CVE-2023-43236 Memory corruption in dlink:dir-816 a2 firmware
- CVE-2023-43235 Memory corruption in dlink:dir-823g firmware
- CVE-2023-43234 Code injection in dedebiz:dedebiz
- CVE-2023-43233 Cross-site scripting in yzncms:yzncms
- CVE-2023-43232 Cross-site scripting in dedebiz:dedebiz
- CVE-2023-4323 Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
- CVE-2023-43226 File upload in dedecms:dedecms
- CVE-2023-43222 Code injection in seacms:seacms
- CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2
- CVE-2023-43216 Path traversal in seacms:seacms
- CVE-2023-4321 Cross-site Scripting (XSS) - Stored in cockpit-hq/cockpit
- CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data
- CVE-2023-43207 Command injection in dlink:dwl-6610ap firmware
- CVE-2023-43206 Command injection in dlink:dwl-6610ap firmware
- CVE-2023-43204 Command injection in dlink:dwl-6610ap firmware
- CVE-2023-43203 Memory corruption in dlink:dwl-6610ap firmware
- CVE-2023-43202 Command injection in dlink:dwl-6610ap firmware
- CVE-2023-43201 Memory corruption in dlink:di-7200g firmware
- CVE-2023-43200 Memory corruption in dlink:di-7200g firmware
- CVE-2023-4320 Satellite: arithmetic overflow in satellite