Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 260 of 430.
- CVE-2023-38766 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-38765 SQL injection in churchcrm:churchcrm
- CVE-2023-38764 SQL injection in churchcrm:churchcrm
- CVE-2023-38763 SQL injection in churchcrm:churchcrm
- CVE-2023-38762 SQL injection in churchcrm:churchcrm
- CVE-2023-38761 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-38760 SQL injection in churchcrm:churchcrm
- CVE-2023-3876 Campcodes Beauty Salon Management System search-appointment.php sql injection
- CVE-2023-38759 wger Workout Manager Cross-Site Request Forgery vulnerability
- CVE-2023-38758 wger Workout Manager Cross-site Scripting vulnerability
- CVE-2023-38752 Missing authorization in Special Interest Group Network for Analysis and Liaison
- CVE-2023-38751 Missing authorization in Special Interest Group Network for Analysis and Liaison
- CVE-2023-38750 Information disclosure in zimbra:zimbra
- CVE-2023-3875 Campcodes Beauty Salon Management System del_feedback.php sql injection
- CVE-2023-38748 Use after free in CX-Programmer
- CVE-2023-38747 Memory corruption in CX-Programmer
- CVE-2023-38746 Memory corruption in CX-Programmer
- CVE-2023-38745 Path traversal in debian:debian linux
- CVE-2023-38744 Denial of service in CJ2H CPU Unit
- CVE-2023-38743 Command injection in zohocorp:manageengine admanager plus
- CVE-2023-38741 IBM TXSeries for Multiplatforms denial of service
- CVE-2023-38740 IBM Db2 denial of service
- CVE-2023-3874 Campcodes Beauty Salon Management System admin-profile.php sql injection
- CVE-2023-38739 IBM Sterling B2B Integrator cross-site request forgery
- CVE-2023-38738 IBM OpenPages with Watson information disclosure
- CVE-2023-38737 IBM WebSphere Application Server Liberty denial of service
- CVE-2023-38736 IBM QRadar WinCollect Agent privilege escalation
- CVE-2023-38735 IBM Cognos Dashboards improper authentication
- CVE-2023-38734 IBM Robotic Process Automation privilege escalation
- CVE-2023-38733 IBM Robotic Process Automation information disclosure
- CVE-2023-38732 IBM Robotic Process Automation information disclosure
- CVE-2023-38730 IBM Spectrum Copy Data Management information disclosure
- CVE-2023-3873 Campcodes Beauty Salon Management System index.php sql injection
- CVE-2023-38729 IBM Db2 information disclosure
- CVE-2023-38728 IBM Db2 denial of service
- CVE-2023-38727 IBM Db2 denial of service
- CVE-2023-38724 IBM Cognos Controller SQL injection
- CVE-2023-38723 Maximo Asset Management cross-site scripting
- CVE-2023-38722 IBM Sterling Partner Engagement Manager cross-site scripting
- CVE-2023-38721 IBM i privilege escalation
- CVE-2023-38720 IBM Db2 denial of service
- CVE-2023-3872 Campcodes Beauty Salon Management System edit-services.php sql injection
- CVE-2023-38719 IBM Db2 denial of service
- CVE-2023-38718 IBM Robotic Process Automation information disclosure
- CVE-2023-38716 IBM Cloud Pak System information disclosure
- CVE-2023-38714 IBM Cloud Pak System information disclosure
- CVE-2023-38713 IBM Cloud Pak System information disclosure
- CVE-2023-38712 Null dereference in libreswan:libreswan
- CVE-2023-38711 Null dereference in libreswan:libreswan
- CVE-2023-38710 Denial of service in libreswan:libreswan
- CVE-2023-3871 Campcodes Beauty Salon Management System edit_category.php sql injection
- CVE-2023-38709 Apache HTTP Server: HTTP response splitting
- CVE-2023-38708 Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
- CVE-2023-38706 Discourse vulnerable to DoS via drafts
- CVE-2023-38704 import-in-the-middle allows unsanitized user controlled input in module generation
- CVE-2023-38703 PJSIP has use-after-free vulnerability in SRTP media transport
- CVE-2023-38702 Knowage Server vulnerable to path traversal via upload functionality
- CVE-2023-38701 Hydra's committed UTxOs at Commit validator and UTxOs at Initial validator can be spent arbitrarily by anyone
- CVE-2023-38700 matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
- CVE-2023-38699 MindsDB 'Call to requests with verify=False disabling SSL certificate checks, security issue.' issue
- CVE-2023-38698 .eth registrar controller can shorten the duration of registered names
- CVE-2023-38697 protocol-http1 HTTP Request/Response Smuggling vulnerability
- CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names
- CVE-2023-38694 Umbraco CMS vulnerable to possible injection of HTML in an unintended form
- CVE-2023-38693 RCE in Lucee REST endpoint
- CVE-2023-38692 Command injection vulnerability in module management function in CloudExplorer Lite
- CVE-2023-38691 matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
- CVE-2023-38690 matrix-appservice-irc IRC command injection via admin commands containing newlines
- CVE-2023-3869 wpDiscuz <= 7.6.3 - Insecure Direct Object Reference to Comment Rating Increase/Decrease
- CVE-2023-38689 Deserialization of Untrusted Data in network IO
- CVE-2023-38688 twitch-tui's connection is not encrypted
- CVE-2023-38687 Execution of arbitrary JavaScript from Svelecte item names
- CVE-2023-38686 Sydent does not verify email server certificates
- CVE-2023-38685 Discourse's restricted tag information visible to unauthenticated users
- CVE-2023-38684 Discourse vulnerable to ossible DDoS due to unbounded limits in various controller actions
- CVE-2023-38683 Memory corruption in JT2Go
- CVE-2023-38682 Memory corruption in JT2Go
- CVE-2023-38681 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-38680 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-38679 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-38678 Segfault in paddle.mode
- CVE-2023-38677 FPE in paddle.linalg.eig
- CVE-2023-38676 Segfault in paddle.dot
- CVE-2023-38675 FPE in paddle.linalg.matrix_rank
- CVE-2023-38674 FPE in paddle.nanmedian
- CVE-2023-38673 Command injection in fs.py
- CVE-2023-38672 FPE in paddle.linalg.matrix_power
- CVE-2023-38671 Heap buffer overflow in paddle.trace
- CVE-2023-38670 Null pointer dereference in paddle.flip
- CVE-2023-3867 ksmbd: fix out of bounds read in smb2_sess_setup
- CVE-2023-38669 Use after free in PaddlePaddle
- CVE-2023-38668 Memory corruption in nasm:netwide assembler
- CVE-2023-38667 Memory corruption in nasm:netwide assembler
- CVE-2023-38666 Memory corruption in axiosys:bento4
- CVE-2023-38665 Null dereference in nasm:netwide assembler
- CVE-2023-3866 ksmbd: validate session id and tree id in the compound request
- CVE-2023-38657 Memory corruption in GTKWave
- CVE-2023-38655 Memory corruption in Intel(R) AMT and Intel(R) Standard Manageability
- CVE-2023-38654 Denial of service in some Intel(R) PROSet/Wireless WiFi software for Windows
- CVE-2023-38653 Integer overflow in GTKWave