Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 238 of 430.
- CVE-2023-4164 There is a possible information disclosure due to a missing permission check in Pixel Watch
- CVE-2023-41638 File upload in grupposcai:realgimm
- CVE-2023-41637 File upload in grupposcai:realgimm
- CVE-2023-41636 SQL injection in grupposcai:realgimm
- CVE-2023-41635 XML external entity in grupposcai:realgimm
- CVE-2023-41633 Null dereference in fossies:catdoc
- CVE-2023-41631 File upload in esst:esst monitoring
- CVE-2023-41630 Code injection in esst:esst monitoring
- CVE-2023-4163 Possible buffer overflow in portcfgfportbuffers in Brocade Fabric OS
- CVE-2023-41629 Path traversal in esst:esst monitoring
- CVE-2023-41628 Denial of service in o-ran-sc:e2
- CVE-2023-41627 Security feature bypass in o-ran-sc:ric message router
- CVE-2023-41626 Gradio arbitrary file upload vulnerability
- CVE-2023-41623 SQL injection in emlog:emlog
- CVE-2023-41621 Cross-site scripting in emlog:emlog
- CVE-2023-4162 Segmentation fault in Brocade Fabric OS after Brocade Fabric OS v9.0
- CVE-2023-41619 Cross-site scripting in emlog:emlog
- CVE-2023-41618 Cross-site scripting in emlog:emlog
- CVE-2023-41616 Cross-site scripting in student management system project:student management system
- CVE-2023-41615 SQL injection in phpgurukul:zoo management system
- CVE-2023-41614 Cross-site scripting in phpgurukul:zoo management system
- CVE-2023-41613 Other in ezviz:ezviz studio
- CVE-2023-41612 Hardcoded credentials in govicture:pc420 firmware
- CVE-2023-41611 Hardcoded credentials in govicture:pc420 firmware
- CVE-2023-41610 Hardcoded credentials in govicture:pc420 firmware
- CVE-2023-4161 WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery to Custom Field Creation
- CVE-2023-41609 Open redirect in couchcms:couchcms
- CVE-2023-41603 Misconfiguration in dlink:r15 firmware
- CVE-2023-41601 Cross-site scripting in cszcms:csz cms
- CVE-2023-4160 WooCommerce PDF Invoice Builder <= 1.2.90 - Authenticated (Administrator+) Cross-Site Scripting
- CVE-2023-41599 Path traversal in jfinalcms project:jfinalcms
- CVE-2023-41597 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-41595 Hardcoded credentials in vaxilu:x-ui
- CVE-2023-41594 SQL injection in phpgurukul:dairy farm shop management system
- CVE-2023-41593 Cross-site scripting in phpgurukul:dairy farm shop management system
- CVE-2023-41592 Froala Editor Cross-site Scripting vulnerability
- CVE-2023-41591 Auth bypass in opennetworking:onos
- CVE-2023-4159 Unrestricted Upload of File with Dangerous Type in omeka/omeka-s
- CVE-2023-41588 Cross-site scripting in appfire:time to sla
- CVE-2023-41580 Other in phpipam:phpipam
- CVE-2023-4158 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
- CVE-2023-41578 Jeecg boot arbitrary file read vulnerability
- CVE-2023-41575 Cross-site scripting in phpgurukul:blood bank \& donor management system
- CVE-2023-41570 Missing authorization in mikrotik:routeros
- CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
- CVE-2023-41566 OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do.
- CVE-2023-41564 Cockpit CMS arbitrary file upload vulnerability
- CVE-2023-41563 Memory corruption in tenda:ac5 firmware
- CVE-2023-41562 Memory corruption in tenda:ac5 firmware
- CVE-2023-41561 Memory corruption in tenda:ac5 firmware
- CVE-2023-41560 Memory corruption in tenda:ac9 firmware
- CVE-2023-4156 Heap out of bound read in builtin.c
- CVE-2023-41559 Memory corruption in tenda:ac5 firmware
- CVE-2023-41558 Memory corruption in tenda:ac7 firmware
- CVE-2023-41557 Memory corruption in tenda:ac5 firmware
- CVE-2023-41556 Memory corruption in tenda:ac5 firmware
- CVE-2023-41555 Memory corruption in tenda:ac7 firmware
- CVE-2023-41554 Memory corruption in tenda:ac9 firmware
- CVE-2023-41553 Memory corruption in tenda:ac5 firmware
- CVE-2023-41552 Memory corruption in tenda:ac7 firmware
- CVE-2023-4155 Sev-es / sev-snp vmgexit double fetch vulnerability
- CVE-2023-41544 JeecgBoot server-side template injection
- CVE-2023-41543 Jeecg Boot SQL Injection
- CVE-2023-41542 Jeecg Boot SQL injection vulnerability
- CVE-2023-4154 Samba: ad dc password exposure to privileged users and rodcs
- CVE-2023-41539 SQL injection in phpjabbers:business directory script
- CVE-2023-41538 Cross-site scripting in phpjabbers:php forum script
- CVE-2023-41537 Cross-site scripting in phpjabbers:business directory script
- CVE-2023-41532 SQL injection in kishan0725:hospital management system
- CVE-2023-41531 SQL injection in kishan0725:hospital management system
- CVE-2023-41530 SQL injection in kishan0725:hospital management system
- CVE-2023-4153 BAN Users <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update & Privilege Escalation
- CVE-2023-41529 Cross-site scripting in kishan0725:hospital management system
- CVE-2023-41528 SQL injection in kishan0725:hospital management system
- CVE-2023-41527 SQL injection in kishan0725:hospital management system
- CVE-2023-41526 SQL injection in kishan0725:hospital management system
- CVE-2023-41525 SQL injection in kishan0725:hospital management system
- CVE-2023-41524 SQL injection in student attendance management system project:student attendance management system
- CVE-2023-41523 SQL injection in student attendance management system project:student attendance management system
- CVE-2023-41522 SQL injection in student attendance management system project:student attendance management system
- CVE-2023-41521 SQL injection in student attendance management system project:student attendance management system
- CVE-2023-41520 SQL injection in student attendance management system project:student attendance management system
- CVE-2023-4152 Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability
- CVE-2023-41519 Cross-site scripting in student attendance management system project:student attendance management system
- CVE-2023-4151 Store Locator WordPress < 1.4.13 - Reflected XSS
- CVE-2023-41508 Hardcoded credentials in superstorefinder:super store finder
- CVE-2023-41507 SQL injection in superstorefinder:super store finder
- CVE-2023-41506 File upload in code-projects:student enrollment
- CVE-2023-41505 File upload in code-projects:student enrollment
- CVE-2023-41504 SQL injection in code-projects:student enrollment
- CVE-2023-41503 SQL injection in code-projects:student enrollment
- CVE-2023-4150 User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF
- CVE-2023-4149 WAGO: OS Command Injection Vulnerability in Managed Switch
- CVE-2023-41484 Information disclosure in cimg:cimg
- CVE-2023-4148 Ditty < 3.1.25 - Reflected XSS
- CVE-2023-41474 Path traversal in ivanti:avalanche
- CVE-2023-41471 Cross-site scripting in 9001:copyparty
- CVE-2023-4147 Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free
- CVE-2023-41453 Cross-site scripting in phpkobo:ajaxnewsticker
- CVE-2023-41452 Cross-site request forgery in phpkobo:ajaxnewsticker