Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 232 of 430.
- CVE-2023-4242 FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check
- CVE-2023-42419 Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution (China Edition)
- CVE-2023-4241 lol-html panics on certain HTML inputs
- CVE-2023-42406 SQL injection in dlink:dar-7000 firmware
- CVE-2023-42405 SQL injection in fit2cloud:rackshift
- CVE-2023-42404 Code injection in Workspace
- CVE-2023-42399 Jodit Editor vulnerable to cross-site scripting
- CVE-2023-42398 Server-side request forgery in zzcms:zzcms
- CVE-2023-4239 Real Estate Manager <= 7.2 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-42387 Information disclosure in tdsql chitu project:tdsql chitu
- CVE-2023-4238 Prevent files / folders access < 2.5.2 - Admin+ Arbitrary File Upload
- CVE-2023-42374 Code injection in mystenlabs:sui
- CVE-2023-42371 Cross-site scripting in summernote:rich text editor
- CVE-2023-4237 Platform: ec2_key module prints out the private key directly to the standard output
- CVE-2023-42366 Memory corruption in busybox:busybox
- CVE-2023-42365 Use after free in busybox:busybox
- CVE-2023-42364 Use after free in busybox:busybox
- CVE-2023-42363 Use after free in busybox:busybox
- CVE-2023-42362 File upload in teller:teller
- CVE-2023-42361 Path traversal in midori-global:better pdf exporter
- CVE-2023-4236 named may terminate unexpectedly under high DNS-over-TLS query load
- CVE-2023-42359 SQL injection in exam form submission in php with source code project:exam form submission in php with source code
- CVE-2023-42358 Denial of service in o-ran-sc:ric-plt-e2mgr
- CVE-2023-4235 Memory corruption in Fedora
- CVE-2023-42346 Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host
- CVE-2023-42345 Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp
- CVE-2023-42344 Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information
- CVE-2023-42343 Alkacon OpenCms is vulnerable to XSS via cmis-online/type
- CVE-2023-4234 Memory corruption in Fedora
- CVE-2023-42336 Hardcoded credentials in netis-systems:wf2409e firmware
- CVE-2023-42335 File upload in fl3xx:crew
- CVE-2023-42334 Privilege escalation in fl3xx:crew
- CVE-2023-42331 File upload in elitecms:elite cms
- CVE-2023-4233 Memory corruption in Fedora
- CVE-2023-42328 Hardcoded credentials in peppermint:peppermint
- CVE-2023-42327 Cross-site scripting in netgate:pfsense
- CVE-2023-42326 Command injection in netgate:pfsense
- CVE-2023-42325 Cross-site scripting in netgate:pfsense
- CVE-2023-42323 Cross-site request forgery in mnbvcxz131421:douhaocms
- CVE-2023-42322 Information disclosure in icmsdev:icms
- CVE-2023-42321 Cross-site request forgery in icmsdev:icms
- CVE-2023-42320 Memory corruption in tenda:ac10 firmware
- CVE-2023-4232 Memory corruption in Fedora
- CVE-2023-42319 go-ethereum vulnerable to denial of service via crafted GraphQL query
- CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System
- CVE-2023-42308 Cross-site scripting in code-projects:exam form submission
- CVE-2023-42307 Cross-site scripting in code-projects:exam form submission
- CVE-2023-4230 ioLogik 4000 Series: Server Banner Information Disclosure
- CVE-2023-42299 Memory corruption in openimageio:openimageio
- CVE-2023-42298 Integer overflow in gpac:gpac
- CVE-2023-42295 Integer overflow in openimageio:openimageio
- CVE-2023-4229 ioLogik 4000 Series: Session Headers Not Implemented
- CVE-2023-42286 Code injection in eyoucms:eyoucms
- CVE-2023-42284 SQL injection in tyk:tyk
- CVE-2023-42283 SQL injection in tyk:tyk
- CVE-2023-42282 NPM IP package incorrectly identifies some private IP addresses as public
- CVE-2023-42280 Path traversal in springernature:mee-admin
- CVE-2023-4228 ioLogik 4000 Series: Session Cookies Attribute Not Set Properly
- CVE-2023-42279 SQL injection in iteachyou:dreamer cms
- CVE-2023-42278 hutool Buffer Overflow vulnerability
- CVE-2023-42277 hutool Buffer Overflow vulnerability
- CVE-2023-42276 hutool Buffer Overflow vulnerability
- CVE-2023-42270 Cross-site request forgery in grocy project:grocy
- CVE-2023-4227 ioLogik 4000 Series: Existence of an Unauthorized Service
- CVE-2023-42268 Jeecg boot SQL Injection vulnerability
- CVE-2023-42261 Withdrawn Advisory: Mobile Security Framework (MobSF) Vulnerable to Insecure Permissions
- CVE-2023-4226 Chamilo LMS File Upload Functionality Remote Code Execution
- CVE-2023-42253 Cross-site scripting in vehicle management project:vehicle management
- CVE-2023-42250 Cross-site scripting in seling:visual access manager
- CVE-2023-4225 Chamilo LMS File Upload Functionality Remote Code Execution
- CVE-2023-42249 Cross-site scripting in seling:visual access manager
- CVE-2023-42248 File upload in seling:visual access manager
- CVE-2023-42247 Cross-site scripting in seling:visual access manager
- CVE-2023-42246 Cross-site scripting in seling:visual access manager
- CVE-2023-42245 Cross-site scripting in seling:visual access manager
- CVE-2023-42244 SQL injection in seling:visual access manager
- CVE-2023-42243 SQL injection in seling:visual access manager
- CVE-2023-42242 SQL injection in seling:visual access manager
- CVE-2023-42241 SQL injection in seling:visual access manager
- CVE-2023-42240 SQL injection in seling:visual access manager
- CVE-2023-4224 Chamilo LMS File Upload Functionality Remote Code Execution
- CVE-2023-42239 SQL injection in seling:visual access manager
- CVE-2023-42238 SQL injection in seling:visual access manager
- CVE-2023-42237 SQL injection in seling:visual access manager
- CVE-2023-42236 SQL injection in seling:visual access manager
- CVE-2023-42235 SQL injection in seling:visual access manager
- CVE-2023-42234 Cross-site request forgery in zucchetti:helpdeskadvanced
- CVE-2023-42233 Cross-site scripting in zucchetti:helpdeskadvanced
- CVE-2023-42232 Path traversal in zucchetti:helpdeskadvanced
- CVE-2023-42231 Missing authorization in zucchetti:helpdeskadvanced
- CVE-2023-42230 Cross-site scripting in zucchetti:helpdeskadvanced
- CVE-2023-4223 Chamilo LMS File Upload Functionality Remote Code Execution
- CVE-2023-42229 Path traversal in zucchetti:helpdeskadvanced
- CVE-2023-42228 Missing authorization in zucchetti:helpdeskadvanced
- CVE-2023-42227 Path traversal in zucchetti:helpdeskadvanced
- CVE-2023-42226 Path traversal in zucchetti:helpdeskadvanced
- CVE-2023-42225 Path traversal in zucchetti:helpdeskadvanced
- CVE-2023-42222 Security feature bypass in webcatalog:webcatalog
- CVE-2023-4222 Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability
- CVE-2023-4221 Chamilo LMS Learning Path PPT2LP Command Injection Vulnerability