Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 255 of 430.
- CVE-2023-3942 Multiple SQLi in ZkTeco-based OEM devices
- CVE-2023-39419 Memory corruption in Solid Edge SE2023
- CVE-2023-39418 Postgresql: merge fails to enforce update or select row security policies
- CVE-2023-39417 Postgresql: extension script @substitutions@ within quoting allow sql injection
- CVE-2023-39416 Command injection in Proself Enterprise/Standard Edition
- CVE-2023-39415 Auth bypass in Proself Enterprise/Standard Edition
- CVE-2023-39414 Integer overflow in GTKWave
- CVE-2023-39413 Integer overflow in GTKWave
- CVE-2023-39412 Cross-site request forgery in Intel Unison software
- CVE-2023-39411 Denial of service in Intel Unison software
- CVE-2023-39410 Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
- CVE-2023-3941 Multiple arbitrary file writes in ZkTeco-based OEM devices
- CVE-2023-39409 Memory corruption in EMUI
- CVE-2023-39408 Memory corruption in EMUI
- CVE-2023-39407 Path traversal in HarmonyOS
- CVE-2023-39406 Missing authorization in EMUI
- CVE-2023-39405 Memory corruption in EMUI
- CVE-2023-39404 Denial of service in EMUI
- CVE-2023-39403 Missing authorization in EMUI
- CVE-2023-39402 Path traversal in EMUI
- CVE-2023-39401 Path traversal in EMUI
- CVE-2023-39400 Path traversal in EMUI
- CVE-2023-3940 Multiple arbitrary file reads in ZkTeco-based OEM devices
- CVE-2023-39399 Missing authorization in EMUI
- CVE-2023-39398 Missing authorization in EMUI
- CVE-2023-39397 Null dereference in EMUI
- CVE-2023-39396 Deserialization in EMUI
- CVE-2023-39395 Other in EMUI
- CVE-2023-39394 Privilege escalation in EMUI
- CVE-2023-39393 Security feature bypass in EMUI
- CVE-2023-39392 Security feature bypass in EMUI
- CVE-2023-39391 Information disclosure in EMUI
- CVE-2023-39390 Denial of service in EMUI
- CVE-2023-3939 Multiple command injection in ZkTeco-based OEM devices
- CVE-2023-39389 Denial of service in EMUI
- CVE-2023-39388 Denial of service in EMUI
- CVE-2023-39387 Missing authorization in EMUI
- CVE-2023-39386 Other in EMUI
- CVE-2023-39385 Misconfiguration in EMUI
- CVE-2023-39384 Missing authorization in EMUI
- CVE-2023-39383 Other in EMUI
- CVE-2023-39382 Denial of service in EMUI
- CVE-2023-39381 Denial of service in EMUI
- CVE-2023-39380 Missing authorization in EMUI
- CVE-2023-3938 Bypassing ZkTeco-based OEM devices/ZKTeco biometric authentication system via SQLi in QR code
- CVE-2023-39379 Information disclosure in Fujitsu Software Infrastructure Manager Advanced Edition
- CVE-2023-39378 SQL injection in SiberianCMS
- CVE-2023-39377 File upload in SiberianCMS
- CVE-2023-39376 SiberianCMS - CWE-284: Improper Access Control Authorized user may disable a security feature over the network
- CVE-2023-39375 SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges
- CVE-2023-39374 ForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element
- CVE-2023-39373 Hyundai car CWE-294: Authentication Bypass by Capture-replay
- CVE-2023-39372 StarTrinity Softswitch version 2023-02-16 - multiple CSRF (CWE-352)
- CVE-2023-39371 StarTrinity Softswitch version 2023-02-16 – Open Redirect (CWE-601)
- CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)
- CVE-2023-3937 Cross site scripting vulnerabilities in Snow License Manager
- CVE-2023-39369 StarTrinity Softswitch version 2023-02-16 - multiple Reflected XSS (CWE-79)
- CVE-2023-39368 Security feature bypass in Intel(R) Processors
- CVE-2023-39367 Command injection in Smart Reader
- CVE-2023-39366 Stored Cross-site Scripting in data_sources.php through Device-Name in 'select' input in Cacti
- CVE-2023-39365 Unchecked regular expressions can lead to SQL Injection and data leakage in Cacti
- CVE-2023-39364 Open redirect in change password functionality in Cacti
- CVE-2023-39363 Vyper incorrectly allocated named re-entrancy locks
- CVE-2023-39362 Authenticated command injection in SNMP options of a Device
- CVE-2023-39361 Unauthenticated SQL Injection in graph_view.php in Cacti
- CVE-2023-39360 Reflected Cross-site Scripting in graphs_new.php in Cacti
- CVE-2023-3936 Blog2Social < 7.2.1 - Reflected XSS
- CVE-2023-39359 Authenticated SQL injection vulnerability in graphs.php in Cacti
- CVE-2023-39358 Authenticated SQL injection vulnerability in reports_user.php in Cacti
- CVE-2023-39357 A Defect in sql_save() Causes Multiple SQL Injection Vulnerabilities in Cacti
- CVE-2023-39356 Missing offset validation leading to Out-of-Bounds Read in FreeRDP
- CVE-2023-39355 FreeRDP Use-After-Free in RDPGFX_CMDID_RESETGRAPHICS
- CVE-2023-39354 FreeRDP Out-Of-Bounds Read in nsc_rle_decompress_data
- CVE-2023-39353 Missing offset validation leading to Out Of Bound Read in FreeRDP
- CVE-2023-39352 Invalid offset validation leading to Out Of Bound Write in FreeRDP
- CVE-2023-39351 FreeRDP Null Pointer Dereference leading denial of service
- CVE-2023-39350 Incorrect offset calculation leading to denial of service in FreeRDP
- CVE-2023-3935 Wibu: Buffer Overflow in CodeMeter Runtime
- CVE-2023-39349 Sentry vulnerable to privilege escalation via ApiTokensEndpoint
- CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker
- CVE-2023-39347 Cilium NetworkPolicy bypass via pod labels
- CVE-2023-39346 File upload in LinuxASMCallGraph
- CVE-2023-39345 Unauthorized Access to Private Fields in User Registration API in strapi
- CVE-2023-39344 social-media-skeleton vulnerable to Pre-Auth SQLi leading to RCE
- CVE-2023-39343 Sulu Observable Response Discrepancy on Admin Login
- CVE-2023-39342 Dangerzone CLI does not sanitize ANSI escape characters
- CVE-2023-39341 Denial of service in ActSecure χ
- CVE-2023-39340 Denial of service in Connect Secure
- CVE-2023-39339 Path traversal in Policy Secure
- CVE-2023-39338 Missing authorization in Sentry
- CVE-2023-39337 Information disclosure in EPMM
- CVE-2023-39336 SQL injection in Endpoint Manager
- CVE-2023-39335 Auth bypass in EPMM
- CVE-2023-39333 Code injection in Node
- CVE-2023-39332 Path traversal in Node
- CVE-2023-39331 Path traversal in Node
- CVE-2023-3933 Your Journey <= 1.9.8 - Prototype Pollution to Reflected Cross-Site Scripting
- CVE-2023-39329 Openjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c
- CVE-2023-39328 Openjpeg: denail of service via crafted image file
- CVE-2023-39327 Openjpeg: malicious files can cause the program to enter a large loop