Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 256 of 430.
- CVE-2023-39326 Denial of service via chunk extensions in net/http
- CVE-2023-39325 HTTP/2 rapid reset can cause excessive work in net/http
- CVE-2023-39323 Arbitrary code execution during build via line directives in cmd/go
- CVE-2023-39322 Memory exhaustion in QUIC connection handling in crypto/tls
- CVE-2023-39321 Panic when processing post-handshake message on QUIC connections in crypto/tls
- CVE-2023-39320 Arbitrary code execution via go.mod toolchain directive in cmd/go
- CVE-2023-3932 Incorrect User Management in GitLab
- CVE-2023-39319 Improper handling of special tags within script contexts in html/template
- CVE-2023-39318 Improper handling of HTML-like comments in script contexts in html/template
- CVE-2023-39317 Integer overflow in GTKWave
- CVE-2023-39316 Integer overflow in GTKWave
- CVE-2023-39314 WordPress Leyka Plugin <= 3.30.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-39313 WordPress Avada theme <= 7.11.1 - Authenticated Server Side Request Forgery (SSRF) vulnerability
- CVE-2023-39312 WordPress Avada theme <= 7.11.1 - Auth. Unrestricted Zip Extraction vulnerability
- CVE-2023-39311 WordPress Avada Builder plugin <= 3.11.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-39310 WordPress Avada Builder plugin <= 3.11.1 - Authenticated Broken Access Control vulnerability
- CVE-2023-39309 WordPress Avada Builder plugin <= 3.11.1 - Auth. SQL Injection vulnerability
- CVE-2023-39308 WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-39307 WordPress Avada theme <= 7.11.1 - Authenticated Arbitrary File Upload vulnerability
- CVE-2023-39306 WordPress Avada Builder plugin <= 3.11.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-39305 WordPress Yet Another Stars Rating plugin <= 3.4.3 - Broken Access Control vulnerability
- CVE-2023-39303 QTS, QuTS hero, QuTScloud
- CVE-2023-39302 QTS, QuTS hero, QuTScloud
- CVE-2023-39301 QTS, QuTS hero, QuTScloud
- CVE-2023-39300 QTS
- CVE-2023-39299 Music Station
- CVE-2023-39298 QTS, QuTS hero
- CVE-2023-39297 QTS, QuTS hero, QuTScloud
- CVE-2023-39296 QTS, QuTS hero
- CVE-2023-39295 QuMagie
- CVE-2023-39294 QTS, QuTS hero
- CVE-2023-39293 Command injection in mitel:mivoice office 400
- CVE-2023-39292 SQL injection in mitel:mivoice office 400
- CVE-2023-39291 Misconfiguration in mitel:mivoice connect
- CVE-2023-39290 Misconfiguration in mitel:mivoice connect
- CVE-2023-39289 Information disclosure in mitel:mivoice connect
- CVE-2023-39288 Command injection in mitel:mivoice connect
- CVE-2023-39287 Command injection in mitel:mivoice connect
- CVE-2023-39286 Cross-site request forgery in mitel:connect mobility router
- CVE-2023-39285 Cross-site request forgery in mitel:mivoice connect
- CVE-2023-39284 Memory corruption in insyde:insydeh2o
- CVE-2023-39283 Memory corruption in insyde:insydeh2o
- CVE-2023-39281 Memory corruption in insyde:insydeh2o
- CVE-2023-39280 Memory corruption in SonicOS
- CVE-2023-39279 Memory corruption in SonicOS
- CVE-2023-39278 Memory corruption in SonicOS
- CVE-2023-39277 Memory corruption in SonicOS
- CVE-2023-39276 Memory corruption in SonicOS
- CVE-2023-39275 Integer overflow in GTKWave
- CVE-2023-39274 Integer overflow in GTKWave
- CVE-2023-39273 Integer overflow in GTKWave
- CVE-2023-39272 Integer overflow in GTKWave
- CVE-2023-39271 Integer overflow in GTKWave
- CVE-2023-39270 Integer overflow in GTKWave
- CVE-2023-39269 Denial of service in RUGGEDCOM M2100
- CVE-2023-39268 Memory Corruption Vulnerability in ArubaOS-Switch
- CVE-2023-39267 Authenticated Denial of Service Vulnerability in ArubaOS-Switch Command Line Interface
- CVE-2023-39266 Unauthenticated Stored Cross-Site Scripting in ArubaOS-Switch
- CVE-2023-39265 Apache Superset: Possible Unauthorized Registration of SQLite Database Connections
- CVE-2023-39264 Apache Superset: Stack traces enabled by default
- CVE-2023-39261 Misconfiguration in IntelliJ IDEA
- CVE-2023-39259 Privilege escalation in Dell OS Recovery Tool
- CVE-2023-39257 Privilege escalation in Rugged Control Center (RCC)
- CVE-2023-39256 Privilege escalation in Rugged Control Center (RCC)
- CVE-2023-39254 Privilege escalation in DUP Framework
- CVE-2023-39253 Privilege escalation in Dell OS Recovery Tool
- CVE-2023-39252 Weak cryptography in Secure Connect Gateway (SCG) Policy Manager
- CVE-2023-39251 Memory corruption in CPG BIOS
- CVE-2023-39250 Information disclosure in Dell Storage Integration Tools for VMware (DSITV), Dell Storage vSphere Client Plugin (DSVCP), Replay Manager for VMware (RMSV)
- CVE-2023-39249 Privilege escalation in SupportAssist Client Consumer
- CVE-2023-39248 Denial of service in Dell Networking OS10
- CVE-2023-39246 Privilege escalation in Dell Encryption, Dell Endpoint Security Suite Enterprise, Dell Security Management Server (Windows)
- CVE-2023-39245 Information disclosure in ESI (Enterprise Storage Integrator) for SAP LAMA
- CVE-2023-39244 Information disclosure in ESI (Enterprise Storage Integrator) for SAP LAMA
- CVE-2023-39240 ASUS RT-AX55、RT-AX56U_V2 - Format String - 3
- CVE-2023-39239 ASUS RT-AX55、RT-AX56U_V2、RT-AC86U - Format String - 2
- CVE-2023-39238 ASUS RT-AX55、RT-AX56U_V2 - Format String - 1
- CVE-2023-39237 ASUS RT-AC86U - Command injection vulnerability - 5
- CVE-2023-39236 ASUS RT-AC86U - Command injection vulnerability - 4
- CVE-2023-39235 Memory corruption in GTKWave
- CVE-2023-39234 Memory corruption in GTKWave
- CVE-2023-39233 Information disclosure in macOS
- CVE-2023-39231 PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass
- CVE-2023-39230 Privilege escalation in Intel Rapid Storage Technology software
- CVE-2023-39228 Missing authorization in Intel Unison software
- CVE-2023-39227 Softneta MedDream PACS Plaintext Storage of a Password
- CVE-2023-39226 Delta Electronics InfraSuite Device Master Exposed Dangerous Method Or Function
- CVE-2023-39224 Command injection in Archer C5
- CVE-2023-39223 Cross-site scripting in pmam.exe
- CVE-2023-39222 Command injection in ACERA 1010
- CVE-2023-39221 Missing authorization in Intel Unison software
- CVE-2023-3922 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
- CVE-2023-39219 Admin Console Denial of Service via Java class enumeration
- CVE-2023-39218 Security feature bypass in Zoom Clients
- CVE-2023-39217 Denial of service in Zoom SDK's
- CVE-2023-39216 Other in Zoom Desktop Client for Windows
- CVE-2023-39215 Auth bypass in Zoom Clients
- CVE-2023-39214 Denial of service in Zoom SDK's
- CVE-2023-39213 Code injection in Zoom Desktop Client for Windows and Zoom VDI Client
- CVE-2023-39212 Denial of service in Zoom Rooms for Windows