Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 254 of 430.
- CVE-2023-39519 CloudExplorer Lite sensitive information leakage vulnerability
- CVE-2023-39518 social-media-skeleton stored Cross-site Scripting vulnerability
- CVE-2023-39517 Cross site scripting (XSS) when clicking on an untrusted `<map>` link in Joplin
- CVE-2023-39516 Stored Cross-Site-Scripting on data_sources.php debug html-block in Cacti
- CVE-2023-39515 Stored Cross-site Scripting on data_debug.php datasource path view in Cacti
- CVE-2023-39514 Stored Cross-site Scripting on graphs.php data template formated name view in Cacti
- CVE-2023-39513 Stored Cross-site Scripting on host.php verbose data-query debug view in Cacti
- CVE-2023-39512 Stored Cross-site Scripting on data_sources.php device name view in Cacti
- CVE-2023-39511 Stored Cross-Site-Scripting on reports_admin.php device name in Cacti
- CVE-2023-39510 Stored Cross-site Scripting in reports_admin.php through Device-Name in 'select' input in Cacti
- CVE-2023-39509 Command injection in Camera Firmware
- CVE-2023-39508 Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges
- CVE-2023-39507 Missing authorization in "Rikunabi NEXT" App for Android
- CVE-2023-39506 PDF-XChange Editor createDataObject Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-39505 PDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure Vulnerability
- CVE-2023-39504 PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-39503 PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-39502 PDF-XChange Editor OXPS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39501 PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-39500 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-3950 Cleartext Storage of Sensitive Information in GitLab
- CVE-2023-39499 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39498 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39497 PDF-XChange Editor JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39496 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-39495 PDF-XChange Editor readFileIntoStream Exposed Dangerous Function Information Disclosure Vulnerability
- CVE-2023-39494 PDF-XChange Editor OXPS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-39493 PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-39492 PDF-XChange Editor PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-39491 PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-39490 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-3949 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-39489 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39488 PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-39487 PDF-XChange Editor util Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-39486 PDF-XChange Editor JP2 File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2023-39485 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-39484 PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability
- CVE-2023-39483 PDF-XChange Editor J2K File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-39482 Softing Secure Integration Server Hardcoded Cryptographic Key Information Disclosure Vulnerability
- CVE-2023-39481 Softing Secure Integration Server Interpretation Conflict Remote Code Execution Vulnerability
- CVE-2023-39480 Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability
- CVE-2023-39479 Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability
- CVE-2023-39478 Softing Secure Integration Server Exposure of Resource to Wrong Sphere Remote Code Execution Vulnerability
- CVE-2023-39477 Inductive Automation Ignition ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2023-39476 Deserialization in Ignition
- CVE-2023-39475 Deserialization in Ignition
- CVE-2023-39474 Inductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability
- CVE-2023-39473 Deserialization in Ignition
- CVE-2023-39472 Inductive Automation Ignition SimpleXMLReader XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-39471 TP-Link TL-WR841N ated_tp Command Injection Remote Code Execution Vulnerability
- CVE-2023-39470 PaperCut NG print.script.sandboxed Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2023-3947 Video Conferencing with Zoom <= 4.2.1 - Sensitive Information Exposure
- CVE-2023-39469 PaperCut NG External User Lookup Code Injection Remote Code Execution Vulnerability
- CVE-2023-39468 Code injection in SCADA Data Gateway
- CVE-2023-39467 Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure Vulnerability
- CVE-2023-39466 Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability
- CVE-2023-39465 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Cryptograhic Key Information Disclosure Vulnerability
- CVE-2023-39464 Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability
- CVE-2023-39463 File upload in SCADA Data Gateway
- CVE-2023-39462 Triangle MicroWorks SCADA Data Gateway Workspace Unrestricted Upload Vulnerability
- CVE-2023-39461 Other in SCADA Data Gateway
- CVE-2023-39460 Triangle MicroWorks SCADA Data Gateway Event Log Directory Traversal Arbitrary File Creation Vulnerability
- CVE-2023-3946 Cross-site scripting in Trellix EPO
- CVE-2023-39459 Triangle MicroWorks SCADA Data Gateway Directory Traversal Arbitrary File Creation Vulnerability
- CVE-2023-39458 Triangle MicroWorks SCADA Data Gateway Use of Hard-coded Credentials Authentication Bypass Vulnerability
- CVE-2023-39457 Triangle MicroWorks SCADA Data Gateway Missing Authentication Vulnerability
- CVE-2023-39456 Apache Traffic Server: Malformed http/2 frames can cause an abort
- CVE-2023-39455 Command injection in WRC-1467GHBK-A
- CVE-2023-39454 Memory corruption in WMC-2LX-B
- CVE-2023-39453 Use after free in ImageGear
- CVE-2023-39452 Socomec MOD3GP-SY-120K Plaintext Storage of a Password
- CVE-2023-3945 phpscriptpoint Lawyer search.php cross site scripting
- CVE-2023-39448 Path traversal in SHIRASAGI
- CVE-2023-39447 BIG-IP APM Guided Configuration vulnerability
- CVE-2023-39446 Socomec MOD3GP-SY-120K Cross-Site Request Forgery
- CVE-2023-39445 Code injection in LAN-WH300N/RE
- CVE-2023-39444 Memory corruption in GTKWave
- CVE-2023-39443 Memory corruption in GTKWave
- CVE-2023-39441 Apache Airflow missing Certificate Validation
- CVE-2023-39440 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-3944 phpscriptpoint Lawyer page.php cross site scripting
- CVE-2023-39439 SAP Commerce accepts empty passphrases.
- CVE-2023-39438 Missing Authorization check allows certain operations on CLA Assistant data
- CVE-2023-39437 Cross-Site Scripting (XSS) vulnerability in SAP Business One
- CVE-2023-39436 Information Disclosure in SAP Supplier Relationship Management
- CVE-2023-39435 Zavio IP Camera Stack-Based Buffer Overflow
- CVE-2023-39434 Use after free in iOS and iPadOS
- CVE-2023-39433 Privilege escalation in Intel(R) CST software
- CVE-2023-39432 Privilege escalation in Intel(R) Ethernet tools and driver install software,
- CVE-2023-39431 Santesoft Sante DICOM Viewer Pro Out-of-bounds Write
- CVE-2023-3943 Multiple buffer overflow in ZkTeco-based OEM devices
- CVE-2023-39429 Cross-site scripting in ACERA 1010
- CVE-2023-39427 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write
- CVE-2023-39425 Privilege escalation in Intel(R) DSA software
- CVE-2023-39424 File upload in IRM Next Generation
- CVE-2023-39423 Improper Neutralization of Special Elements used in an SQL Command in RDPData.dll
- CVE-2023-39422 Use of Hard-coded Credentials in multiple /irmdata/api/ endpoints
- CVE-2023-39421 Use of Hard-coded Credentials in RDPWin.dll
- CVE-2023-39420 Use of Hard-coded Credentials in RDPCore.dll