Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 250 of 430.
- CVE-2023-40116 Security feature bypass in Android
- CVE-2023-40115 Use after free in Android
- CVE-2023-40114 Use after free in Android
- CVE-2023-40113 Missing authorization in Android
- CVE-2023-40112 Memory corruption in Android
- CVE-2023-40111 Privilege escalation in Android
- CVE-2023-40110 Memory corruption in Android
- CVE-2023-4011 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-40109 Privilege escalation in Android
- CVE-2023-40108 Missing authorization in Android
- CVE-2023-40107 Use after free in Android
- CVE-2023-40106 Privilege escalation in Android
- CVE-2023-40105 Missing authorization in Android
- CVE-2023-40104 Weak cryptography in Android
- CVE-2023-40103 Memory corruption in Android
- CVE-2023-40101 Memory corruption in Android
- CVE-2023-40100 Use after free in Android
- CVE-2023-40098 Business logic in Android
- CVE-2023-40097 Privilege escalation in Android
- CVE-2023-40096 Privilege escalation in Android
- CVE-2023-40095 Privilege escalation in Android
- CVE-2023-40094 Missing authorization in Android
- CVE-2023-40093 Information disclosure in Android
- CVE-2023-40092 Information disclosure in Android
- CVE-2023-40091 Memory corruption in Android
- CVE-2023-40090 Security feature bypass in Android
- CVE-2023-4009 Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager
- CVE-2023-40089 Missing authorization in Android
- CVE-2023-40088 Use after free in Android
- CVE-2023-40087 Memory corruption in Android
- CVE-2023-40085 Memory corruption in Android
- CVE-2023-40084 Use after free in Android
- CVE-2023-40083 Memory corruption in Android
- CVE-2023-40082 Weak cryptography in Android
- CVE-2023-40081 Information disclosure in Android
- CVE-2023-40080 Memory corruption in Android
- CVE-2023-4008 Incorrect Ownership Assignment in GitLab
- CVE-2023-40079 Privilege escalation in Android
- CVE-2023-40078 Memory corruption in Android
- CVE-2023-40077 Race condition in Android
- CVE-2023-40076 Privilege escalation in Android
- CVE-2023-40075 Denial of service in Android
- CVE-2023-40074 Denial of service in Android
- CVE-2023-40073 Information disclosure in Android
- CVE-2023-40072 Command injection in WAB-I1750-PS
- CVE-2023-40071 Privilege escalation in Intel(R) GPA software installers
- CVE-2023-40070 Privilege escalation in Intel(R) Power Gadget software for macOS
- CVE-2023-4007 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-40069 Command injection in WRC-1167GHBK2
- CVE-2023-40068 Cross-site scripting in Advanced Custom Fields
- CVE-2023-40067 Privilege escalation in Intel(R) CSME
- CVE-2023-40062 Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability
- CVE-2023-40061 Insecure Job Execution Mechanism Vulnerability
- CVE-2023-40060 2FA/MFA Bypass Vulnerability in Serv-U 15.4 and 15.4 Hotfix 1
- CVE-2023-4006 Improper Neutralization of Formula Elements in a CSV File in thorsten/phpmyfaq
- CVE-2023-40058 Sensitive Information Disclosure Vulnerability
- CVE-2023-40057 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
- CVE-2023-40056 SolarWinds Platform SQL Injection Remote Code Execution Vulnerability
- CVE-2023-40055 SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-40054 SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-40053 HTML injection Vulnerability in Serv-U 15.4
- CVE-2023-40052 Progress Application Server (PAS) for OpenEdge Denial of Service
- CVE-2023-40051 Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
- CVE-2023-40050 Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
- CVE-2023-4005 Insufficient Session Expiration in fossbilling/fossbilling
- CVE-2023-40049 WS_FTP Server Information Disclosure via Directory Listing
- CVE-2023-40048 WS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability
- CVE-2023-40047 WS_FTP Server Stored Cross-Site Scripting Vulnerability
- CVE-2023-40046 WS_FTP Server SQL Injection via Administrative Interface
- CVE-2023-40045 WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data
- CVE-2023-40043 MOVEit Transfer System Administrator SQL Injection
- CVE-2023-40042 Memory corruption in totolink:t10 v2 firmware
- CVE-2023-40041 Memory corruption in totolink:t10 v2 firmware
- CVE-2023-40040 Missing authorization in mycrops:higrade
- CVE-2023-4004 Kernel: netfilter: use-after-free due to improper element removal in nft_pipapo_remove()
- CVE-2023-40039 Weak cryptography in arris:tg1672g firmware
- CVE-2023-40038 Weak cryptography in arris:dg1670a firmware
- CVE-2023-40037 Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs
- CVE-2023-40036 Notepad++ global buffer read overflow in CharDistributionAnalysis::HandleOneChar
- CVE-2023-40035 Craft CMS vulnerable to Remote Code Execution via validatePath bypass
- CVE-2023-40034 Repositoty takeover in woodpecker-ci
- CVE-2023-40033 Server-Side Request Forgery via Avatar upload in flarum
- CVE-2023-40032 Potential segfault due to NULL pointer dereference in libvips
- CVE-2023-40031 Notepad++ vulnerable to heap buffer write overflow in Utf8_16_Read::convert
- CVE-2023-40030 Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports
- CVE-2023-4003 One Identity Password Manager version 5.9.7.1 - Unauthenticated physical access privilege escalation
- CVE-2023-40029 Cluster secret might leak in cluster details page in Argo CD
- CVE-2023-40028 Arbitrary file read via symlinks in Ghost
- CVE-2023-40027 Conditionally missing authorization in @keystone-6/core
- CVE-2023-40026 Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server
- CVE-2023-40025 Argo CD web terminal session doesn't expire
- CVE-2023-40024 Reflected Cross-Site Scripting (XSS) in scancode.io license endpoint
- CVE-2023-40023 Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading
- CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic
- CVE-2023-40021 Timing Attack Reveals CSRF Tokens in oppia
- CVE-2023-40020 Improper Authentication in PrivateUploader
- CVE-2023-4002 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-40019 Denial of service in freeswitch
- CVE-2023-40018 FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID