Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 226 of 430.
- CVE-2023-43199 Memory corruption in dlink:di-7200g firmware
- CVE-2023-43198 Memory corruption in dlink:di-7200g firmware
- CVE-2023-43197 Memory corruption in dlink:di-7200g firmware
- CVE-2023-43196 Memory corruption in dlink:di-7200g firmware
- CVE-2023-43194 Missing authorization in rcos:submitty
- CVE-2023-43193 Cross-site scripting in rcos:submitty
- CVE-2023-43192 SQL injection in jrecms:springbootcms
- CVE-2023-43191 Cross-site scripting in jrecms:springbootcms
- CVE-2023-43187 Code injection in nodebb:nodebb
- CVE-2023-43183 Missing authorization in reprisesoftware:reprise license manager
- CVE-2023-4318 Herd Effects < 5.2.4 - Effect Deletion via CSRF
- CVE-2023-43177 Other in crushftp:crushftp
- CVE-2023-43176 Deserialization in afterlogic:aurora files
- CVE-2023-4317 Incorrect Authorization in GitLab
- CVE-2023-4316 Zod 3.22.2 - Regular expression Denial of Service
- CVE-2023-43154 Auth bypass in macs cms project:macs cms
- CVE-2023-4315 Woo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit
- CVE-2023-43149 Cross-site request forgery in spa-cart:spa-cart
- CVE-2023-43148 Cross-site request forgery in spa-cart:spa-cart
- CVE-2023-43147 Cross-site request forgery in phpjabbers:limo booking software
- CVE-2023-43144 SQL injection in projectworlds:asset management system project in php
- CVE-2023-43141 Missing authorization in totolink:a3700r firmware
- CVE-2023-4314 wpDataTables < 2.1.66 - Admin+ PHP Object Injection
- CVE-2023-43139 Command injection in franfinance:franfinance
- CVE-2023-43138 Command injection in tp-link:tl-er5120g firmware
- CVE-2023-43137 Command injection in tp-link:tl-er5120g firmware
- CVE-2023-43135 Missing authorization in tp-link:tl-er5120g firmware
- CVE-2023-43134 Missing authorization in netis-systems:360r firmware
- CVE-2023-43132 SQL injection in szvone:vmqphp
- CVE-2023-43131 Memory corruption in maxiguvenlik:general device manager
- CVE-2023-43130 Command injection in dlink:dir-806 firmware
- CVE-2023-43129 Command injection in dlink:dir-806 firmware
- CVE-2023-43128 Command injection in dlink:dir-806 firmware
- CVE-2023-43125 BIG-IP APM Clients TunnelCrack vulnerability
- CVE-2023-43124 BIG-IP APM Clients TunnelCrack vulnerability
- CVE-2023-43123 Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files
- CVE-2023-43122 Information disclosure in samsung:exynos 1080 firmware
- CVE-2023-43121 Path traversal in extremenetworks:exos
- CVE-2023-43120 Privilege escalation in extremenetworks:exos
- CVE-2023-43119 Privilege escalation in extremenetworks:exos
- CVE-2023-43118 Cross-site request forgery in extremenetworks:exos
- CVE-2023-43116 Buildkite Elastic CI for AWS symbolic link following vulnerability
- CVE-2023-43115 Code injection in artifex:ghostscript
- CVE-2023-43114 Memory corruption in qt:qt
- CVE-2023-4311 Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCE
- CVE-2023-43103 Cross-site scripting in zimbra:collaboration
- CVE-2023-43102 Cross-site scripting in zimbra:collaboration
- CVE-2023-4310 Command injection in Privileged Remote Access (PRA)
- CVE-2023-43091 Gnome-maps: gnome maps is vulnerable to a code injection attack (similar to xss) via its service.json
- CVE-2023-43090 Gnome-shell: screenshot tool allows viewing open windows when session is locked
- CVE-2023-4309 SQL injection in Internet Election Service
- CVE-2023-43089 Misconfiguration in Dell Rugged Control Center
- CVE-2023-43088 Memory corruption in CPG BIOS
- CVE-2023-43087 Information disclosure in PowerScale OneFS
- CVE-2023-43086 Privilege escalation in Dell Command Configure (DCC)
- CVE-2023-43082 Security feature bypass in Unity
- CVE-2023-43081 Misconfiguration in PowerProtect Agent for File System
- CVE-2023-4308 User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
- CVE-2023-43079 Privilege escalation in Dell OpenManage Server Administrator
- CVE-2023-43078 Privilege escalation in Dell Client Platform, Dell Dock Firmware
- CVE-2023-43076 Denial of service in PowerScale OneFS
- CVE-2023-43074 Path traversal in Unity
- CVE-2023-43073 Other in Dell SmartFabric Storage Software
- CVE-2023-43072 Missing authorization in Dell SmartFabric Storage Software
- CVE-2023-43071 Cross-site scripting in Dell SmartFabric Storage Software
- CVE-2023-43070 Path traversal in Dell SmartFabric Storage Software
- CVE-2023-4307 Lock User Account <= 1.0.3 - Arbitrary Account Lock/Unlock via CSRF
- CVE-2023-43069 Command injection in Dell SmartFabric Storage Software
- CVE-2023-43068 Command injection in Dell SmartFabric Storage Software
- CVE-2023-43067 XML external entity in Unity
- CVE-2023-43066 Command injection in Unity
- CVE-2023-43065 Cross-site scripting in Unity
- CVE-2023-43064 IBM i code execution
- CVE-2023-43058 IBM Robotic Process Automation privilege escalation
- CVE-2023-43057 IBM QRadar SIEM cross-site scripting
- CVE-2023-43054 IBM Engineering Test Management cross-site scripting
- CVE-2023-43052 IBM Control Center external service interaction
- CVE-2023-43051 IBM Cognos Analytics cross-site scripting
- CVE-2023-43045 IBM Sterling Partner Engagement Manager security bypass
- CVE-2023-43044 IBM License Metric Tool directory traversal
- CVE-2023-43043 IBM Maximo Application Suite information disclosure
- CVE-2023-43042 IBM Storage Virtualize information disclosure
- CVE-2023-43041 IBM QRadar information disclosure
- CVE-2023-43040 IBM Spectrum Fusion HCI improper access control
- CVE-2023-4304 Business Logic Errors in froxlor/froxlor
- CVE-2023-43039 IBM OpenPages with Watson cross-site scripting
- CVE-2023-43037 IBM Maximo Application Suite improper access control
- CVE-2023-43035 IBM Sterling Control Center information disclosure
- CVE-2023-4303 HTML injection vulnerability in Fortify Plugin
- CVE-2023-43029 IBM Storage Virtualize vSphere Remote Plug-in information disclosure
- CVE-2023-43021 IBM InfoSphere Information Server information disclosure
- CVE-2023-4302 Missing permission checks in Fortify Plugin allow capturing credentials
- CVE-2023-43018 IBM CICS TX privilege escalation
- CVE-2023-43017 IBM Security Verify Access man in the middle
- CVE-2023-43016 IBM Security Access Manager Container unauthorized access
- CVE-2023-43015 IBM InfoSphere Information Server cross-site scripting
- CVE-2023-43014 Asset Management System v1.0 - Authenticated SQL Injection (SQLi)
- CVE-2023-43013 Asset Management System v1.0 - Unauthenticated SQL Injection (SQLi)
- CVE-2023-43010 Memory corruption in Safari
- CVE-2023-4301 CSRF vulnerability in Fortify Plugin allow capturing credentials