Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 253 of 430.
- CVE-2023-39674 Memory corruption in dlink:dir-880l a1 firmware
- CVE-2023-39673 Memory corruption in tenda:ac15 firmware
- CVE-2023-39672 Memory corruption in tenda:wh450a firmware
- CVE-2023-39671 Memory corruption in dlink:dir-880l a1 firmware
- CVE-2023-39670 Memory corruption in tenda:ac6 firmware
- CVE-2023-3967 DoS Vulnerability in Hitachi Ops Center Common Services
- CVE-2023-39669 Null dereference in dlink:dir-880l a1 firmware
- CVE-2023-39668 Memory corruption in dlink:dir-868l firmware
- CVE-2023-39667 Memory corruption in dlink:dir-868l firmware
- CVE-2023-39666 Memory corruption in dlink:dir-842 firmware
- CVE-2023-39665 Memory corruption in dlink:dir-868l firmware
- CVE-2023-39663 MathJax Regular expression Denial of Service (ReDoS)
- CVE-2023-39662 llama-index vulnerable to arbitrary code execution
- CVE-2023-39661 PandasAI vulnerable to arbitrary code execution
- CVE-2023-39660 pandasai vulnerable to prompt injection
- CVE-2023-3966 Openvswsitch: ovs-vswitch fails to recover after malformed geneve metadata packet
- CVE-2023-39659 LangChain vulnerable to arbitrary code execution
- CVE-2023-39655 CouchAuth host header injection vulnerability leaks the password reset token
- CVE-2023-39654 SQL injection in abuquant:abupy
- CVE-2023-39652 SQL injection in themevolty:theme volty video tab
- CVE-2023-39651 SQL injection in themevolty:theme volty cms brandlist
- CVE-2023-39650 SQL injection in themevolty:theme volty cms blog
- CVE-2023-3965 nsc <= 1.0 - Prototype Pollution to Reflected Cross-Site Scripting
- CVE-2023-39649 SQL injection in themevolty:theme volty cms category slider
- CVE-2023-39648 SQL injection in themevolty:theme volty cms testimonial
- CVE-2023-39647 SQL injection in themevolty:theme volty cms category product
- CVE-2023-39646 SQL injection in themevolty:theme volty cms category chain slider
- CVE-2023-39645 SQL injection in themevolty:cms payment icon
- CVE-2023-39643 SQL injection in blmodules:xmlfeeds pro
- CVE-2023-39642 SQL injection in carts.guru:cartsguru
- CVE-2023-39641 SQL injection in activedesign:full affiliates
- CVE-2023-39640 SQL injection in uplight:cookie law
- CVE-2023-3964 Incorrect Authorization in GitLab
- CVE-2023-39639 SQL injection in leotheme:leoblog
- CVE-2023-39638 Command injection in dlink:dir-859 a1 firmware
- CVE-2023-39637 Command injection in dlink:dir-816 firmware
- CVE-2023-39631 Langchain vulnerable to arbitrary code execution via the evaluate function in the numexpr library
- CVE-2023-39620 Information disclosure in buffalo:terastation nas 5410r firmware
- CVE-2023-3962 Winters <= 1.4.3 - Prototype Pollution to Reflected Cross-Site Scripting
- CVE-2023-39619 Inefficient Regular Expression Complexity in node-email-check
- CVE-2023-39618 Command injection in totolink:x5000r firmware
- CVE-2023-39617 Command injection in totolink:x5000r firmware
- CVE-2023-39616 Memory corruption in aomedia:aomedia
- CVE-2023-39615 Memory corruption in xmlsoft:libxml2
- CVE-2023-39612 Cross-site scripting in filebrowser:filebrowser
- CVE-2023-39611 Path traversal in softwarefx:chart fx
- CVE-2023-39610 Denial of service in tp-link:tapo c100 firmware
- CVE-2023-3961 Samba: smbd allows client access to unix domain sockets on the file system as root
- CVE-2023-39600 Cross-site scripting in icewarp:icewarp
- CVE-2023-39599 Cross-site scripting in cszcms:csz cms
- CVE-2023-39598 Cross-site scripting in icewarp:webclient
- CVE-2023-39593 Privilege escalation in mariadb:mariadb
- CVE-2023-3959 Zavio IP Camera Stack-Based Buffer Overflow
- CVE-2023-39584 Hexo `include_code` has a path traversal
- CVE-2023-39582 SQL injection in chamilo:chamilo lms
- CVE-2023-3958 WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery
- CVE-2023-39578 Cross-site scripting in tribalsystems:zenario
- CVE-2023-39575 Cross-site scripting in isl:arp-guard
- CVE-2023-3957 ACF Photo Gallery Field <= 1.9 - Authenticated (Subscriber+) Arbitrary Usermeta Update
- CVE-2023-39562 Use after free in gpac:gpac
- CVE-2023-39560 SQL injection in ectouch:ectouch
- CVE-2023-3956 Missing authorization in InstaWP Connect – 1-click WP Staging & Migration
- CVE-2023-39559 Information disclosure in web-audimex:audimexee
- CVE-2023-39558 Cross-site scripting in web-audimex:audimexee
- CVE-2023-39553 Apache Airflow Drill Provider Arbitrary File Read Vulnerability
- CVE-2023-39551 SQL injection in phpgurukul:online security guards hiring system
- CVE-2023-39550 Memory corruption in netgear:jwnr2000v2 firmware
- CVE-2023-3955 Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation
- CVE-2023-39549 Use after free in Solid Edge SE2023
- CVE-2023-39548 Command injection in CLUSTERPRO X (EXPRESSCLUSTER X)
- CVE-2023-39547 Command injection in CLUSTERPRO X (EXPRESSCLUSTER X)
- CVE-2023-39546 Command injection in CLUSTERPRO X (EXPRESSCLUSTER X)
- CVE-2023-39545 Command injection in CLUSTERPRO X (EXPRESSCLUSTER X)
- CVE-2023-39544 Missing authorization in CLUSTERPRO X SingleServerSafe (EXPRESSCLUSTER X SingleServerSafe)
- CVE-2023-39543 Cross-site scripting in LuxCal Web Calendar
- CVE-2023-39542 Code injection in Foxit Reader
- CVE-2023-39541 Memory corruption in Gecko Platform
- CVE-2023-39540 Memory corruption in Gecko Platform
- CVE-2023-3954 MultiParcels Shipping For WooCommerce 1.15.2-1.15.3 - Reflected XSS
- CVE-2023-39539 Failure when uploading a Logo image file
- CVE-2023-39538 Failure when uploading a Logo image file
- CVE-2023-39537 Improper input validation in BIOS TCG2
- CVE-2023-39536 Improper input validation in BIOS OFBD
- CVE-2023-39535 Improper input validation in BIOS
- CVE-2023-39534 Malformed GAP submessage triggers assertion failure
- CVE-2023-39533 libp2p nodes vulnerable to attack using large RSA keys
- CVE-2023-39532 SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution
- CVE-2023-39531 Sentry vulnerable to incorrect credential validation on OAuth token requests
- CVE-2023-39530 PrestaShop vulnerable to file deletion via CustomerMessage
- CVE-2023-3953 Memory corruption in GP-Pro EX WinGP for PC/AT
- CVE-2023-39529 PrestaShop vulnerable to file deletion via attachment API
- CVE-2023-39528 PrestaShop vulnerable to file reading through path traversal
- CVE-2023-39527 PrestaShop XSS vulnerability through Validate::isCleanHTML method
- CVE-2023-39526 PrestaShopSQL manager vulnerability (potential RCE)
- CVE-2023-39525 PrestaShop vulnerable to path traversal
- CVE-2023-39524 PrestaShop vulnerable to boolean SQL injection in search product in BO
- CVE-2023-39523 ScanCode.io command injection in docker image fetch process
- CVE-2023-39522 Username enumeration attack in goauthentik
- CVE-2023-39521 Tuleap vulnerable to Cross-site Scripting on the success message of a kanban deletion
- CVE-2023-39520 Cryptomator vulnerable to Local Elevation of Privileges