Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 231 of 430.
- CVE-2023-42533 Other in Samsung Mobile Devices
- CVE-2023-42532 Security feature bypass in Samsung Mobile Devices
- CVE-2023-42531 Security feature bypass in Samsung Mobile Devices
- CVE-2023-42530 Missing authorization in Samsung Mobile Devices
- CVE-2023-4253 Chatbot < 4.7.8 - Admin+ Stored XSS in FAQ Builder
- CVE-2023-42529 Memory corruption in Samsung Mobile Devices
- CVE-2023-42528 Memory corruption in Samsung Mobile Devices
- CVE-2023-42527 Information disclosure in Samsung Mobile Devices
- CVE-2023-42526 Denial of service in withsecure:atlant
- CVE-2023-42525 Denial of service in withsecure:atlant
- CVE-2023-42524 Denial of service in withsecure:atlant
- CVE-2023-42523 Denial of service in withsecure:atlant
- CVE-2023-42522 Denial of service in withsecure:atlant
- CVE-2023-42521 Denial of service in withsecure:atlant
- CVE-2023-42520 Denial of service in withsecure:atlant
- CVE-2023-4252 EventPrime <= 3.2.9 - Booking Pricing Bypass
- CVE-2023-4251 EventPrime < 3.2.0 - Booking Creation via CSRF
- CVE-2023-42509 JFrog Artifactory Sensitive Data Leakage in Repository configuration process
- CVE-2023-42508 JFrog Artifactory Improper header input validation leads to email manipulation sent from the platform
- CVE-2023-42507 Memory corruption in OnSinView2
- CVE-2023-42506 Memory corruption in OnSinView2
- CVE-2023-42505 Apache Superset: Sensitive information disclosure on db connection details
- CVE-2023-42504 Apache Superset: Lack of rate limiting allows for possible denial of service
- CVE-2023-42503 Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file
- CVE-2023-42502 Apache Superset: Open Redirect Vulnerability
- CVE-2023-42501 Apache Superset: Unnecessary read permissions within the Gamma role
- CVE-2023-4250 EventPrime < 3.2.0 - Reflected XSS
- CVE-2023-42498 Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2023-42497 Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
- CVE-2023-42496 Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
- CVE-2023-42495 Command injection in Dasan Networks
- CVE-2023-42494 EisBaer Scada - CWE-749: Exposed Dangerous Method or Function
- CVE-2023-42493 EisBaer Scada - CWE-256: Plaintext Storage of a Password
- CVE-2023-42492 EisBaer Scada - CWE-321: Use of Hard-coded Cryptographic Key
- CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization
- CVE-2023-42490 EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2023-4249 Zavio IP Camera Stack-Based Buffer Overflow
- CVE-2023-42489 EisBaer Scada - CWE-732: Incorrect Permission Assignment for Critical Resource
- CVE-2023-42488 EisBaer Scada - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2023-42487 Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2023-42486 Fortect - CWE-428: Unquoted Search Path or Element
- CVE-2023-42483 Race condition in samsung:exynos 1080 firmware
- CVE-2023-42482 Use after free in samsung:exynos 2200 firmware
- CVE-2023-42481 Improper Access Control vulnerability in SAP Commerce Cloud
- CVE-2023-42480 Information Disclosure in NetWeaver AS Java Logon
- CVE-2023-4248 GiveWP <= 2.33.3 - Cross-Site Request Forgery to Stripe Integration Deletion
- CVE-2023-42479 Cross-Site Scripting (XSS) vulnerability in SAP Biller Direct
- CVE-2023-42478 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-42477 Server-Side Request Forgery in SAP NetWeaver AS Java (GRMG Heartbeat application)
- CVE-2023-42476 Cross Site Scripting vulnerability in SAP BusinessObjects Web Intelligence
- CVE-2023-42475 Information Disclosure Vulnerability in Statutory Reporting
- CVE-2023-42474 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Web Intelligence
- CVE-2023-42473 Missing Authorization Check In S/4HANA (Manage Withholding Tax Items)
- CVE-2023-42472 File upload in SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface)
- CVE-2023-42471 Code injection in wave-ai:wave
- CVE-2023-42470 Code injection in imoulife:life
- CVE-2023-4247 GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin deactivation
- CVE-2023-42469 Missing authorization in fulldive:full dialer
- CVE-2023-42468 Missing authorization in azmobileapps:color phone
- CVE-2023-42467 Denial of service in qemu:qemu
- CVE-2023-42465 Auth bypass in sudo project:sudo
- CVE-2023-42464 Memory corruption in debian:debian linux
- CVE-2023-42463 wazuh-logcollector integer underflow local privilege escalation
- CVE-2023-42462 File deletion through document upload process in GLPI
- CVE-2023-42461 SQL injection in ITIL actors in GLPI
- CVE-2023-42460 _abi_decode input not validated in complex expressions in Vyper
- CVE-2023-4246 GiveWP <= 2.33.3 - Cross-Site Request Forgery to plugin installation
- CVE-2023-42459 Malformed DATA submessage leads to bad-free error in Fast-DDS
- CVE-2023-42458 Zope vulnerable to Stored Cross Site Scripting with SVG images
- CVE-2023-42457 plone.rest vulnerable to Denial of Service when ++api++ is used many times
- CVE-2023-42456 sudo-rs Session File Relative Path Traversal vulnerability
- CVE-2023-42455 Wazuh vulnerable to user privilege escalation
- CVE-2023-42454 SQLpage vulnerable to public exposure of database credentials
- CVE-2023-42453 Improper validation of receipts allows forged read receipts in matrix synapse
- CVE-2023-42452 Mastodon vulnerable to Stored XSS through the translation feature
- CVE-2023-42451 Mastodon Invalid Domain Name Normalization vulnerability
- CVE-2023-42450 Mastodon Server-Side Request Forgery vulnerability
- CVE-2023-4245 WooCommerce PDF Invoice Builder <= 1.2.89 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-42449 Business logic in hydra
- CVE-2023-42448 Business logic in hydra
- CVE-2023-42447 blurhash panics on parsing crafted inputs
- CVE-2023-42446 Pow Mnesia cache doesn't invalidate all expired keys on startup
- CVE-2023-42445 Possible local file exfiltration by XML External entity injection
- CVE-2023-42444 phonenumber panics on parsing crafted RF3966 inputs
- CVE-2023-42443 Vyper vulnerable to memory corruption in certain builtins utilizing `msize`
- CVE-2023-42442 JumpServer session replays download without authentication
- CVE-2023-42441 Vyper has incorrect re-entrancy lock when key is empty string
- CVE-2023-4244 Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-42439 GeoNode SSRF Bypass to return internal host data
- CVE-2023-42438 Other in macOS
- CVE-2023-42436 Cross-site scripting in GROWI
- CVE-2023-42435 Cross-Site Request Forgery in DEXMA DEXGate
- CVE-2023-42433 Misconfiguration in Endurance Gaming Mode software installers
- CVE-2023-42431 Potential XSS on user preferences page
- CVE-2023-4243 FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation
- CVE-2023-42429 Memory corruption in Intel NUC BIOS firmware
- CVE-2023-42428 Path traversal in CubeCart
- CVE-2023-42427 Cross-site scripting in UNIVERSAL PASSPORT RX
- CVE-2023-42426 Cross-site scripting in froala:froala editor
- CVE-2023-42425 Weak cryptography in turing:edge\+ evc5fd firmware