Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 228 of 430.
- CVE-2023-42874 Information disclosure in macOS
- CVE-2023-42873 Memory corruption in iOS and iPadOS
- CVE-2023-42872 Missing authorization in iOS and iPadOS
- CVE-2023-42871 Memory corruption in iOS and iPadOS
- CVE-2023-42870 Use after free in iOS and iPadOS
- CVE-2023-42869 Memory corruption in iOS and iPadOS
- CVE-2023-42867 Privilege escalation in GarageBand
- CVE-2023-42866 Memory corruption in Safari
- CVE-2023-42865 Memory corruption in iOS and iPadOS
- CVE-2023-42862 Memory corruption in iOS and iPadOS
- CVE-2023-42861 Business logic in macOS
- CVE-2023-42860 Security feature bypass in macOS
- CVE-2023-42859 Security feature bypass in macOS
- CVE-2023-42858 Information disclosure in macOS
- CVE-2023-42857 Information disclosure in iOS and iPadOS
- CVE-2023-42856 Memory corruption in macOS
- CVE-2023-42855 Security feature bypass in iOS and iPadOS
- CVE-2023-42854 Denial of service in macOS
- CVE-2023-42853 Business logic in macOS
- CVE-2023-42852 Business logic in Safari
- CVE-2023-42850 Privilege escalation in macOS
- CVE-2023-42849 Memory corruption in iOS and iPadOS
- CVE-2023-42848 Memory corruption in iOS and iPadOS
- CVE-2023-42847 Auth bypass in iOS and iPadOS
- CVE-2023-42846 Information disclosure in iOS and iPadOS
- CVE-2023-42845 Auth bypass in iOS and iPadOS
- CVE-2023-42844 Path traversal in macOS
- CVE-2023-42843 Other in Safari
- CVE-2023-42842 Information disclosure in macOS
- CVE-2023-42841 Memory corruption in iOS and iPadOS
- CVE-2023-42840 Information disclosure in macOS
- CVE-2023-4284 Post Timeline < 2.2.6 - Reflected XSS
- CVE-2023-42839 Information disclosure in iOS and iPadOS
- CVE-2023-42838 Security feature bypass in macOS
- CVE-2023-42836 Security feature bypass in iOS and iPadOS
- CVE-2023-42835 Business logic in macOS
- CVE-2023-42834 Information disclosure in iOS and iPadOS
- CVE-2023-42833 Code injection in Safari
- CVE-2023-42832 Race condition in macOS
- CVE-2023-42831 Information disclosure in iOS and iPadOS
- CVE-2023-42830 Information disclosure in iOS and iPadOS
- CVE-2023-4283 EmbedPress <= 3.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-42829 Information disclosure in macOS
- CVE-2023-42828 Privilege escalation in macOS
- CVE-2023-42826 Other in macOS
- CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation
- CVE-2023-42823 Information disclosure in iOS and iPadOS
- CVE-2023-42822 Unchecked access to font glyph info in xrdp
- CVE-2023-42821 github.com/gomarkdown/markdown Out-of-bounds Read while parsing citations
- CVE-2023-42820 Random seed leakage in Jumpserver
- CVE-2023-4282 Missing authorization in EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more
- CVE-2023-42819 Path traversal in Jumpserver
- CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver
- CVE-2023-42817 Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations
- CVE-2023-42816 Denial of service from malicious signature in kyverno
- CVE-2023-42815 Denial of service from malicious image manifest in kyverno
- CVE-2023-42814 Denial of service from malicious image manifest in kyverno
- CVE-2023-42813 Denial of service from malicious manifest in kyverno
- CVE-2023-42812 Galaxy vulnerable to Server Side Request Forgery during data imports
- CVE-2023-42811 AEADs/aes-gcm: Plaintext exposed in decrypt_in_place_detached even on tag verification failure
- CVE-2023-42810 systeminformation SSID Command Injection Vulnerability
- CVE-2023-4281 Activity Log < 2.8.8 - IP Spoofing
- CVE-2023-42809 Redisson unsafe deserialization vulnerability
- CVE-2023-42808 Common Voice Cross-site Scripting vulnerability
- CVE-2023-42807 Frappe LMS SQL Injection Issue on People Page
- CVE-2023-42806 Snapshot signature not including HeadID will allow replay attacks
- CVE-2023-42805 quinn-proto Denial of Service vulnerability
- CVE-2023-42804 BigBlueButton Path Traversal – Reading Certain File Extensions
- CVE-2023-42803 BigBlueButton Unrestricted File Upload vulnerability
- CVE-2023-42802 GLPI vulnerable to unallowed PHP script execution
- CVE-2023-42801 Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`
- CVE-2023-42800 Buffer overflow due to use of `strcpy` in `performRtspHandshake`
- CVE-2023-4280 Unvalidated input in Silicon Labs TrustZone implementation leads to accessing Trusted memory region
- CVE-2023-42799 Buffer overflow due to use of `strcpy` in `parseUrlAddrFromRtspUrlString`
- CVE-2023-42798 AutomataCI Release Job Can Revert Repo to First Commit
- CVE-2023-42797 Command injection in CP-8031 MASTER MODULE
- CVE-2023-42796 Path traversal in CP-8031 MASTER MODULE
- CVE-2023-42795 Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests
- CVE-2023-42794 Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
- CVE-2023-42793 JetBrains TeamCity Authentication Bypass
- CVE-2023-42792 Apache Airflow: Improper access control to DAG resources
- CVE-2023-42791 Path traversal in FortiAnalyzer
- CVE-2023-42790 Memory corruption in FortiOS
- CVE-2023-4279 User Activity Log < 1.6.7 - IP Spoofing
- CVE-2023-42789 Memory corruption in FortiOS
- CVE-2023-42788 Command injection in FortiAnalyzer
- CVE-2023-42787 Security feature bypass in FortiAnalyzer
- CVE-2023-42786 Null dereference in FortiOS
- CVE-2023-42785 Null dereference in FortiOS
- CVE-2023-42784 Command injection in FortiWeb
- CVE-2023-42783 Path traversal in FortiWLM
- CVE-2023-42782 Auth bypass in FortiAnalyzer
- CVE-2023-42781 Apache Airflow: Permission verification bypass allows viewing dagruns of other dags
- CVE-2023-42780 Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature
- CVE-2023-4278 MasterStudy LMS < 3.0.18 - Unauthenticated Instructor Account Creation
- CVE-2023-42776 Information disclosure in Intel(R) SGX DCAP software for Windows
- CVE-2023-42774 Liteos-A has a incorrect default permissions vulnerability
- CVE-2023-42773 Privilege escalation in Intel(R) Power Gadget software for Windows
- CVE-2023-42772 Memory corruption in UEFI firmware for some Intel(R) reference processors
- CVE-2023-42771 Auth bypass in ACERA 1310