Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 257 of 430.
- CVE-2023-39211 Privilege escalation in Zoom Desktop Client for Windows and Zoom Rooms for Windows
- CVE-2023-39210 Information disclosure in Zoom Client SDK for Windows
- CVE-2023-39209 Information disclosure in Zoom Desktop Client for Windows
- CVE-2023-39208 Denial of service in Zoom Desktop Client for Linux
- CVE-2023-39206 Memory corruption in Zoom Clients
- CVE-2023-39205 Denial of service in Zoom Clients
- CVE-2023-39204 Memory corruption in Zoom Clients
- CVE-2023-39203 Denial of service in Zoom Rooms Client for Windows and Zoom VDI Client
- CVE-2023-39202 Denial of service in Zoom Rooms Client for Windows and Zoom VDI Client
- CVE-2023-39201 Privilege escalation in CleanZoom
- CVE-2023-3920 Incorrect Authorization in GitLab
- CVE-2023-39199 Weak cryptography in Zoom Clients
- CVE-2023-39198 Kernel: qxl: race condition leading to use-after-free in qxl_mode_dumb_create()
- CVE-2023-39197 Kernel: dccp: conntrack out-of-bounds read in nf_conntrack_dccp_packet()
- CVE-2023-39196 Apache Ozone Improper Authentication vulnerability
- CVE-2023-39194 Kernel: xfrm: out-of-bounds read in __xfrm_state_filter_match()
- CVE-2023-39193 Kernel: netfilter: xtables sctp out-of-bounds read in match_flags()
- CVE-2023-39192 Kernel: netfilter: xtables out-of-bounds read in u32_match_it()
- CVE-2023-39191 Kernel: ebpf: insufficient stack type checks in dynptr
- CVE-2023-39189 Kernel: netfilter: nftables out-of-bounds read in nf_osf_match_one()
- CVE-2023-39188 Memory corruption in Solid Edge SE2023
- CVE-2023-39187 Memory corruption in Solid Edge SE2023
- CVE-2023-39186 Memory corruption in Solid Edge SE2023
- CVE-2023-39185 Memory corruption in Solid Edge SE2023
- CVE-2023-39184 Memory corruption in Solid Edge SE2023
- CVE-2023-39183 Memory corruption in Solid Edge SE2023
- CVE-2023-39182 Memory corruption in Solid Edge SE2023
- CVE-2023-39181 Memory corruption in Solid Edge SE2023
- CVE-2023-39180 Kernel: ksmbd: read request memory leak denial-of-service vulnerability
- CVE-2023-39179 Kernel: ksmbd: read request out-of-bounds read information disclosure vulnerability
- CVE-2023-39176 Kernel: ksmbd: transform header out-of-bounds read information disclosure vulnerability
- CVE-2023-39175 Cross-site scripting in TeamCity
- CVE-2023-39174 Denial of service in TeamCity
- CVE-2023-39173 Privilege escalation in TeamCity
- CVE-2023-39172 SENEC: Storage Box V1,V2 and V3 transmitting sensitive data unencrypted
- CVE-2023-39171 SENEC Storage Box V1,V2 and V3 accidentially expose a management interface
- CVE-2023-3917 Improper Validation of Specified Type of Input in GitLab
- CVE-2023-39169 SENEC: Storage Box V1,V2 and V3 using default credentials
- CVE-2023-39167 SENEC: Storage Box V1,V2 and V3 affected by improper access control vulnerability
- CVE-2023-39166 WordPress tagDiv Composer Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-39165 WordPress Sign-up Sheets Plugin <= 2.2.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-39164 WordPress Molongui Plugin <= 4.6.19 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-39163 WordPress Phlox Shop plugin <= 2.0.0 - Unauthenticated Local File Inclusion vulnerability
- CVE-2023-39162 WordPress User Email Verification for WooCommerce Plugin <= 3.5.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-39161 WordPress Discussion Board plugin <= 2.4.8 - Content Injection vulnerability
- CVE-2023-39159 WordPress Fraud Prevention For Woocommerce Plugin <= 2.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-39158 WordPress Woocommerce Category Banner Management Plugin <= 2.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-39157 WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)
- CVE-2023-39156 CSRF vulnerability in Bazaar Plugin
- CVE-2023-39155 Secret displayed without masking by Chef Identity Plugin
- CVE-2023-39154 Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials
- CVE-2023-39153 CSRF vulnerability in GitLab Authentication Plugin
- CVE-2023-39152 Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log
- CVE-2023-39151 Jenkins Stored Cross-site Scripting vulnerability
- CVE-2023-39150 Code injection in maximus5:conemu
- CVE-2023-3915 Incorrect Execution-Assigned Permissions in GitLab
- CVE-2023-39147 File upload in webkul:uvdesk
- CVE-2023-39144 Information disclosure in element55:knowmore
- CVE-2023-39143 Path traversal in papercut:papercut mf
- CVE-2023-39141 webui-aria2 Path Traversal vulnerability
- CVE-2023-3914 Incorrect User Management in GitLab
- CVE-2023-39139 Path traversal in Archive
- CVE-2023-39138 Path traversal in ZIPFoundation
- CVE-2023-39137 Filename spoofing in archive
- CVE-2023-39136 Denial of service in ziparchive project:ziparchive
- CVE-2023-39135 Path traversal in Zip Swift
- CVE-2023-39130 Memory corruption in gnu:gdb
- CVE-2023-39129 Use after free in gnu:gdb
- CVE-2023-39128 Memory corruption in gnu:gdb
- CVE-2023-39125 Integer overflow in ntsc-crt project:ntsc-crt
- CVE-2023-39122 SQL injection in bmc:control-m
- CVE-2023-39121 SQL injection in emlog:emlog
- CVE-2023-39115 Cross-site scripting in campcodes:complete online matrimonial website system script
- CVE-2023-39114 Memory corruption in miniupnp project:ngiflib
- CVE-2023-39113 Memory corruption in miniupnp project:ngiflib
- CVE-2023-39112 Auth bypass in shopex:ecshop
- CVE-2023-39110 Server-side request forgery in rconfig:rconfig
- CVE-2023-39109 Server-side request forgery in rconfig:rconfig
- CVE-2023-39108 Server-side request forgery in rconfig:rconfig
- CVE-2023-39107 Path traversal in nomachine:nomachine
- CVE-2023-39106 Nacos Spring vulnerable to Unsafe Deserialization
- CVE-2023-39097 Cross-site scripting in webboss:webboss.io cms
- CVE-2023-39096 Cross-site scripting in webboss:webboss.io cms
- CVE-2023-39094 Cross-site scripting in zerowdd:studentmanager
- CVE-2023-3909 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-39086 Information disclosure in asus:rt-ac66u b1 firmware
- CVE-2023-39076 Denial of service in gm:mylink infotainment system
- CVE-2023-39075 Denial of service in renault:zoe ev 2021 firmware
- CVE-2023-39073 Missing authorization in voltronicpower:snmp web pro
- CVE-2023-39070 Use after free in cppchecksolutions:cppcheck
- CVE-2023-3907 Improper User Management in GitLab
- CVE-2023-39069 Auth bypass in strangebee:cortex
- CVE-2023-39068 Memory corruption in xiongmaitech:nb080s09s-klc firmware
- CVE-2023-39067 Cross-site scripting in zlmediakit:zlmediakit
- CVE-2023-39063 Memory corruption in raidenftpd:raidenftpd
- CVE-2023-39062 Spipu HTML2PDF vulnerable to cross-site scripting
- CVE-2023-39061 Cross-site request forgery in chamilo:chamilo
- CVE-2023-3906 Improper Validation of Specified Type of Input in GitLab
- CVE-2023-39059 Code injection in ansible semaphore
- CVE-2023-39058 Information disclosure in the b members card project:the b members card