Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 242 of 430.
- CVE-2023-41095 Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices
- CVE-2023-41094 Touchlink authentication bypass due to packets processed after timeout or out of range in Ember ZNet
- CVE-2023-41093 Loss of confidentiality due to potential race condition in Bluetooth controller Connection_Handle reuse
- CVE-2023-41092 Denial of service in Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs
- CVE-2023-41091 Privilege escalation in Intel(R) MPI Library Software
- CVE-2023-41090 Race condition in Intel(R) MAS software
- CVE-2023-4109 Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
- CVE-2023-41089 Improper Authentication in DEXMA DEXGate
- CVE-2023-41088 Cleartext Transmission of Sensitive Information in DEXMA DEXGate
- CVE-2023-41086 Cross-site request forgery in ACERA 1010
- CVE-2023-41085 BIG-IP IPSEC vulnerability
- CVE-2023-41084 Socomec MOD3GP-SY-120K Reliance on Cookies without Validation and Integrity Checking
- CVE-2023-41082 Null dereference in Intel(R) CST software
- CVE-2023-41081 Apache Tomcat Connectors: Unexpected use of first declared worker in mod_jk for unmapped request
- CVE-2023-41080 Apache Tomcat: Open redirect with FORM authentication
- CVE-2023-4108 Audit logging fails to sanitize post metadata
- CVE-2023-41079 Security feature bypass in macOS
- CVE-2023-41078 Security feature bypass in macOS
- CVE-2023-41077 Missing authorization in macOS
- CVE-2023-41076 Privilege escalation in macOS
- CVE-2023-41075 Memory corruption in iOS and iPadOS
- CVE-2023-41074 Code injection in Safari
- CVE-2023-41073 Missing authorization in iOS and iPadOS
- CVE-2023-41072 Information disclosure in iOS and iPadOS
- CVE-2023-41071 Use after free in iOS and iPadOS
- CVE-2023-41070 Business logic in iOS and iPadOS
- CVE-2023-4107 Incorrect authorization allows a user manager to update a system admin
- CVE-2023-41069 Auth bypass in iOS and iPadOS
- CVE-2023-41068 Privilege escalation in iOS and iPadOS
- CVE-2023-41067 Security feature bypass in macOS
- CVE-2023-41066 Information disclosure in macOS
- CVE-2023-41065 Information disclosure in iOS and iPadOS
- CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow
- CVE-2023-41063 Memory corruption in iOS and iPadOS
- CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution
- CVE-2023-41060 Memory corruption in iOS and iPadOS
- CVE-2023-4106 A guest user can perform various actions on public playbooks
- CVE-2023-41058 Trigger `beforeFind` not invoked in internal query pipeline in parse-server
- CVE-2023-41057 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it
- CVE-2023-41056 Redis vulnerable to integer overflow in certain payloads
- CVE-2023-41055 LibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia_language cookie
- CVE-2023-41054 LibreY Server-Side Request Forgery (SSRF) vulnerability in image_proxy.php
- CVE-2023-41053 Redis SORT_RO may bypass ACL configuration
- CVE-2023-41052 Vyper: incorrect order of evaluation of side effects for some builtins
- CVE-2023-41051 Default functions in VolatileMemory trait lack bounds checks in vm-memory
- CVE-2023-41050 Information disclosure through Python's "format" functionality in Zope AccessControl
- CVE-2023-4105 Attachment of deleted message in a thread remains accessible and downloadable
- CVE-2023-41049 Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client
- CVE-2023-41048 plone.namedfile vulnerable to Stored Cross Site Scripting with SVG images
- CVE-2023-41047 Improper Neutralization of Special Elements Used in a Template Engine in OctoPrint
- CVE-2023-41046 Velocity execution without script rights in Xwiki platform
- CVE-2023-41045 Insecure source port usage for DNS queries in Graylog
- CVE-2023-41044 Partial path traversal vulnerability in Support Bundle feature of Graylog
- CVE-2023-41043 Discourse DoS via SvgSprite cache
- CVE-2023-41042 Discourse DoS via remote theme assets
- CVE-2023-41041 User session is still usable after logout in graylog2-server
- CVE-2023-41040 GitPython blind local file inclusion
- CVE-2023-4104 Missing authorization in Mozilla VPN 2.16.1
- CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython
- CVE-2023-41038 Server crash when using specific form of SET BIND statement
- CVE-2023-41037 Cleartext Signed Message Signature Spoofing in openpgpjs
- CVE-2023-41036 Macvim's Insecure Usage of IPC Mechanisms
- CVE-2023-41034 DDFFileParser in eclipse leshan is vulnerable to XXE Attacks
- CVE-2023-41033 Memory corruption in Parasolid V35.0
- CVE-2023-41032 Memory corruption in Parasolid V34.1
- CVE-2023-41031 Juplink RX4-1500 homemng.htm Command Injection Vulnerability
- CVE-2023-41030 Juplink RX4-1500 Hard-coded Credential Vulnerability
- CVE-2023-4103 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-41029 Juplink RX4-1500 Command Injection Vulnerability
- CVE-2023-41028 Juplink RX4-1500 Stack-based Buffer Overflow Vulnerability
- CVE-2023-41027 Juplink RX4-1500 Credential Disclosure Vulnerability
- CVE-2023-4102 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-41015 SQL injection in code-projects:online job portal
- CVE-2023-41014 SQL injection in code-projects:online job portal
- CVE-2023-41013 Cross-site scripting in icewarp:icewarp
- CVE-2023-41012 Auth bypass in chinamobile:intelligent home gateway firmware
- CVE-2023-41011 Command injection in chinamobile:intelligent home gateway firmware
- CVE-2023-41010 Hardcoded credentials in tianyisc:tewa-700g firmware
- CVE-2023-4101 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-41009 File upload in adlered:bolo-solo
- CVE-2023-41005 Command injection in pagekit
- CVE-2023-41000 Use after free in gpac:gpac
- CVE-2023-4100 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-40998 Memory corruption in o-ran-sc:ric message router
- CVE-2023-40997 Memory corruption in o-ran-sc:ric message router
- CVE-2023-40992 SQL injection in kishan0725:hospital management system
- CVE-2023-4099 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-40989 SQL injection in jeecgboot
- CVE-2023-40986 Cross-site scripting in webmin:webmin
- CVE-2023-40985 Cross-site scripting in webmin:webmin
- CVE-2023-40984 Cross-site scripting in webmin:webmin
- CVE-2023-40983 Cross-site scripting in webmin:webmin
- CVE-2023-40982 Cross-site scripting in webmin:webmin
- CVE-2023-40980 File upload in diaowen:dwsurvey
- CVE-2023-4098 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-40970 SQL injection in slims:senayan library management system
- CVE-2023-4097 Multiple vulnerabilities in IDM Sistemas QSige
- CVE-2023-40969 Server-side request forgery in slims:senayan library management system
- CVE-2023-40968 Memory corruption in hzeller:timg
- CVE-2023-4096 Weak password recovery mechanism vulnerability in Fujitsu Arconte Áurea