Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 269 of 430.
- CVE-2023-37836 Denial of service in jpeg:libjpeg
- CVE-2023-37833 Missing authorization in elenos:etg150 firmware
- CVE-2023-37832 Auth bypass in elenos:etg150 firmware
- CVE-2023-37831 Information disclosure in elenos:etg150 firmware
- CVE-2023-37830 Cross-site scripting in general-solutions:contwise case2
- CVE-2023-3783 Webile HTTP POST Request cross site scripting
- CVE-2023-37829 Cross-site scripting in general-solutions:contwise case2
- CVE-2023-37828 Cross-site scripting in general-solutions:contwise case2
- CVE-2023-37827 Cross-site scripting in general-solutions:contwise case2
- CVE-2023-37826 Cross-site scripting in general-solutions:contwise case2
- CVE-2023-37824 SQL injection in sitolog:sitolog application connect
- CVE-2023-37822 Weak cryptography in eufy:homebase 2 firmware
- CVE-2023-3782 Denial of service in squareup:okhttp-brotli
- CVE-2023-3781 Use after free in Android
- CVE-2023-37798 Cross-site scripting in vanderbilt:redcap
- CVE-2023-37794 Command injection in wayos:fbm-291w firmware
- CVE-2023-37793 Memory corruption in wayos:fbm-291w firmware
- CVE-2023-37791 Memory corruption in dlink:dir-619l firmware
- CVE-2023-37790 File upload in broadcom:clarity
- CVE-2023-3779 Essential Addons For Elementor <=5.8.1 - Unauthenticated MailChimp API Key Disclosure
- CVE-2023-37788 goproxy Denial of Service vulnerability
- CVE-2023-37787 Cross-site scripting in geeklog:geeklog
- CVE-2023-37786 Cross-site scripting in geeklog:geeklog
- CVE-2023-37785 ImpressCMS Cross-site Scripting vulnerability
- CVE-2023-37781 Path traversal in emqx:emqx
- CVE-2023-37777 A SQL injection vulnerability exists in Synnefo Internet Management Software (IMS) version 2023 and earlier.
- CVE-2023-37772 SQL injection in phpgurukul:online shopping portal
- CVE-2023-37771 SQL injection in phpgurukul:art gallery management system
- CVE-2023-37770 Memory corruption in grame:faust
- CVE-2023-3777 Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-37769 Denial of service in pixman:pixman
- CVE-2023-37767 Memory corruption in gpac:gpac
- CVE-2023-37766 Memory corruption in gpac:gpac
- CVE-2023-37765 Memory corruption in gpac:gpac
- CVE-2023-3776 Use-after-free in Linux kernel's net/sched: cls_fw component
- CVE-2023-37759 Missing authorization in trendylogics:crypto currency tracker
- CVE-2023-37758 Memory corruption in dlink:dir-815 firmware
- CVE-2023-37756 Weak cryptography in i-doit:i-doit
- CVE-2023-37755 Hardcoded credentials in i-doit:i-doit
- CVE-2023-37754 Code injection in PowerJob
- CVE-2023-3775 Vault Enterprise's Sentinel RGP Policies Allowed For Cross-Namespace Denial of Service
- CVE-2023-37749 Incorrect access control in the REST API endpoint of HubSpot v1.29441 allows unauthenticated attackers to view users' data without proper authorization.
- CVE-2023-37748 Denial of service in miniupnp project:ngiflib
- CVE-2023-37746 Cross-site scripting in phpgurukul:maid hiring management system
- CVE-2023-37745 Cross-site scripting in phpgurukul:maid hiring management system
- CVE-2023-37744 Cross-site scripting in phpgurukul:maid hiring management system
- CVE-2023-37743 Cross-site scripting in phpgurukul:teacher subject allocation system
- CVE-2023-37742 Cross-site scripting in webboss:webboss.io cms
- CVE-2023-3774 Vault Enterprise Namespace Creation May Lead to Denial of Service
- CVE-2023-37739 Path traversal in i-doit:i-doit
- CVE-2023-37734 Memory corruption in ezsoftmagic:mp3 audio converter
- CVE-2023-37733 File upload in tduckcloud:tduck-platform
- CVE-2023-37732 Null dereference in yasm project:yasm
- CVE-2023-3773 Kernel: xfrm: out-of-bounds read of xfrma_mtimer_thresh nlattr
- CVE-2023-37728 Cross-site scripting in icewarp:icewarp
- CVE-2023-37723 Memory corruption in tenda:4g300 firmware
- CVE-2023-37722 Memory corruption in tenda:4g300 firmware
- CVE-2023-37721 Memory corruption in tenda:4g300 firmware
- CVE-2023-3772 Kernel: xfrm: null pointer dereference in xfrm_update_ae_params()
- CVE-2023-37719 Memory corruption in tenda:f1202 firmware
- CVE-2023-37718 Memory corruption in tenda:4g300 firmware
- CVE-2023-37717 Memory corruption in tenda:ac10 firmware
- CVE-2023-37716 Memory corruption in tenda:ac10 firmware
- CVE-2023-37715 Memory corruption in tenda:f1202 firmware
- CVE-2023-37714 Memory corruption in tenda:ac7 firmware
- CVE-2023-37712 Memory corruption in tenda:ac1206 firmware
- CVE-2023-37711 Memory corruption in tenda:ac10 firmware
- CVE-2023-37710 Memory corruption in tenda:ac10 firmware
- CVE-2023-3771 T1 theme <= 19.0 - Open Redirect
- CVE-2023-37707 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37706 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37705 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37704 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37703 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37702 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37701 Memory corruption in tenda:fh1203 firmware
- CVE-2023-37700 Memory corruption in tenda:fh1203 firmware
- CVE-2023-3770 Vulnerability in Ingeteam's INGEPAC DA
- CVE-2023-37692 Stored Cross-Site Scripting October CMS
- CVE-2023-37690 SQL injection in phpgurukul:maid hiring management system
- CVE-2023-3769 Vulnerability in Ingeteam's INGEPAC EF
- CVE-2023-37689 SQL injection in phpgurukul:maid hiring management system
- CVE-2023-37688 SQL injection in phpgurukul:maid hiring management system
- CVE-2023-37687 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2023-37686 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2023-37685 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2023-37684 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2023-37683 Cross-site scripting in phpgurukul:online nurse hiring system
- CVE-2023-37682 SQL injection in judging management system project:judging management system
- CVE-2023-3768 Vulnerability in Ingeteam's INGEPAC EF/DA
- CVE-2023-37679 Command injection in nextgen:mirth connect
- CVE-2023-37677 File upload in pligg:pligg cms
- CVE-2023-3767 OS command injection on EasyPHP Webserver
- CVE-2023-3766 Invalid Slice Split Results in Server Panic
- CVE-2023-37659 xalpha vulnerable to Remote Code Execution
- CVE-2023-37658 Cross-site scripting in fastposter:fast-poster
- CVE-2023-37657 Cross-site scripting in lm21:twonav
- CVE-2023-37656 File upload in websiteguide project:websiteguide
- CVE-2023-37650 Cockpit CMS Cross-Site Request Forgery vulnerability
- CVE-2023-3765 Absolute Path Traversal in mlflow/mlflow