Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 252 of 430.
- CVE-2023-39917 WordPress Photo Gallery by Ays Plugin <= 5.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-39916 Possible path traversal when storing RRDP responses
- CVE-2023-39915 Crashes on parsing certain invalid RPKI objects
- CVE-2023-39914 BER/CER/DER decoder panics on invalid input
- CVE-2023-39913 Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
- CVE-2023-39912 Path traversal in zohocorp:manageengine admanager plus
- CVE-2023-39910 Weak cryptography in libbitcoin:libbitcoin explorer
- CVE-2023-3991 OS command injection vulnerability in FreshTomato 2023.3
- CVE-2023-39909 Missing authorization in ericsson:network manager
- CVE-2023-39908 Information disclosure in yubico:yubihsm 2 sdk
- CVE-2023-39903 Information disclosure in fujitsu:software infrastructure manager
- CVE-2023-39902 Memory corruption in nxp:uboot secondary program loader
- CVE-2023-3990 Mingsoft MCMS HTTP POST Request search.do cross site scripting
- CVE-2023-3989 SourceCodester Jewelry Store System add_customer.php cross site scripting
- CVE-2023-3988 Cafe Billing System Order index.php sql injection
- CVE-2023-3987 SourceCodester Simple Online Mens Salon Management System sql injection
- CVE-2023-3986 SourceCodester Simple Online Mens Salon Management System cross site scripting
- CVE-2023-39854 Server-side request forgery in atx:ucrypt
- CVE-2023-39853 SQL injection in dzzoffice:dzzoffice
- CVE-2023-39852 SQL injection in doctor appointment system project:doctor appointment system
- CVE-2023-39851 SQL injection in webchess project:webchess
- CVE-2023-39850 SQL injection in schoolmate project:schoolmate
- CVE-2023-3985 SourceCodester Online Jewelry Store login.php sql injection
- CVE-2023-39846 Auth bypass in pantsel:konga
- CVE-2023-39843 Weak cryptography in sulimet:5-in-1 smart door lock firmware
- CVE-2023-39842 Weak cryptography in mydigoo:dg-hamb smart home security system firmware
- CVE-2023-39841 Weak cryptography in etekcity:3-in-1 smart door lock firmware
- CVE-2023-3984 phpscriptpoint RecipePoint recipe-result sql injection
- CVE-2023-39834 Command injection in pbootcms:pbootcms
- CVE-2023-3983 SQL injection in Advantech iView
- CVE-2023-39829 Memory corruption in tenda:a18 firmware
- CVE-2023-39828 Memory corruption in tenda:a18 firmware
- CVE-2023-39827 Memory corruption in tenda:a18 firmware
- CVE-2023-3982 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
- CVE-2023-39810 Path traversal in busybox:busybox
- CVE-2023-3981 Server-Side Request Forgery (SSRF) in omeka/omeka-s
- CVE-2023-39809 Command injection in nvki:intelligent broadband subscriber gateway
- CVE-2023-39808 Hardcoded credentials in nvki:intelligent broadband subscriber gateway
- CVE-2023-39807 SQL injection in nvki:intelligent broadband subscriber gateway
- CVE-2023-39806 SQL injection in idreamsoft:icms
- CVE-2023-39805 SQL injection in idreamsoft:icms
- CVE-2023-39804 Denial of service in gnu:tar
- CVE-2023-39801 Denial of service in renault:easy link
- CVE-2023-3980 Cross-site Scripting (XSS) - Stored in omeka/omeka-s
- CVE-2023-39796 SQL injection in wbce:wbce cms
- CVE-2023-3979 Incorrect Authorization in GitLab
- CVE-2023-39786 Memory corruption in tenda:ac8 firmware
- CVE-2023-39785 Memory corruption in tenda:ac8 firmware
- CVE-2023-39784 Memory corruption in tenda:ac8 firmware
- CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection
- CVE-2023-3978 Improper rendering of text nodes in golang.org/x/net/html
- CVE-2023-39777 Cross-site scripting in vbulletin:vbulletin
- CVE-2023-39776 File upload in phpjabbers:ticket support script
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
- CVE-2023-39751 Memory corruption in tp-link:tl-wr941nd v6 firmware
- CVE-2023-39750 Memory corruption in dlink:dap-2660 firmware
- CVE-2023-3975 OS Command Injection in jgraph/drawio
- CVE-2023-39749 Memory corruption in dlink:dap-2660 firmware
- CVE-2023-39748 Denial of service in tp-link:tl-wr1041n v2 firmware
- CVE-2023-39747 Memory corruption in tp-link:tl-wr841n v8 firmware
- CVE-2023-39745 Memory corruption in tp-link:tl-wr841n v8 firmware
- CVE-2023-39743 Memory corruption in pete4abw:lzma software development kit
- CVE-2023-39742 Memory corruption in giflib project:giflib
- CVE-2023-39741 Memory corruption in long range zip project:long range zip
- CVE-2023-39740 Information disclosure in linecorp:onigiriya-musubee
- CVE-2023-3974 OS Command Injection in jgraph/drawio
- CVE-2023-39739 Information disclosure in linecorp:regina sweets\&bakery
- CVE-2023-39737 Information disclosure in linecorp:matsuya
- CVE-2023-39736 Information disclosure in linecorp:fukunaga memberscard
- CVE-2023-39735 Information disclosure in linecorp:uomasa saiji new
- CVE-2023-39734 Information disclosure in linecorp:trackdiner10\/10 mc
- CVE-2023-39733 Information disclosure in linecorp:tonton-tei
- CVE-2023-39732 Information disclosure in linecorp:tokueimaru waiting
- CVE-2023-39731 Information disclosure in line:kaibutsunosato
- CVE-2023-3973 Cross-site Scripting (XSS) - Reflected in jgraph/drawio
- CVE-2023-39726 Code injection in mintty project:mintty
- CVE-2023-3972 Insights-client: unsafe handling of temporary files and directories
- CVE-2023-39714 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39712 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39711 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39710 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-3971 Controller: html injection in custom login info
- CVE-2023-39709 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39708 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39707 Cross-site scripting in free and open source inventory management system project:free and open source inventory management system
- CVE-2023-39703 Cross-site scripting in typora:typora
- CVE-2023-39700 Cross-site scripting in icewarp:mail server
- CVE-2023-3970 GZ Scripts Availability Booking Calendar PHP Image cross site scripting
- CVE-2023-39699 Path traversal in icewarp:mail server
- CVE-2023-39695 Auth bypass in elenos:etg150 firmware
- CVE-2023-39691 Missing authorization in kodcloud:kodbox
- CVE-2023-3969 GZ Scripts Availability Booking Calendar PHP HTTP POST Request index.php cross site scripting
- CVE-2023-39685 hson-java vulnerable to denial of service
- CVE-2023-39683 Cross-site scripting in zalify:easy email
- CVE-2023-39681 Code injection in cuppacms:cuppacms
- CVE-2023-39680 Deserialization in sollace:unicopia
- CVE-2023-39678 Cross-site scripting in bdcom:p3310d-2ac firmware
- CVE-2023-39677 Information disclosure in myprestamodules:product catalog \(csv\, excel\) import
- CVE-2023-39676 Cross-site scripting in fieldthemes:fieldpopupnewsletter
- CVE-2023-39675 SQL injection in myprestamodules:product catalog \(csv\, excel\) import