Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 270 of 430.
- CVE-2023-37649 Cockpit CMS vulnerable to incorrect access control
- CVE-2023-37647 SQL injection in sem-cms:semcms
- CVE-2023-37646 Path traversal in bitberry:file opener
- CVE-2023-37645 Information disclosure in eyoucms:eyoucms
- CVE-2023-37644 Memory corruption in swftools:swftools
- CVE-2023-3764 WooCommerce PDF Invoice Builder <= 1.2.90 - Cross-Site Request Forgery via Save
- CVE-2023-37636 Cross-site scripting in webkul:uvdesk
- CVE-2023-37635 Auth bypass in uvdesk:community-skeleton
- CVE-2023-37630 Cross-site scripting in simple online piggery management system project:simple online piggery management system
- CVE-2023-3763 Intergard SGS SQL Query cleartext transmission
- CVE-2023-37629 File upload in simple online piggery management system project:simple online piggery management system
- CVE-2023-37628 SQL injection in simple online piggery management system project:simple online piggery management system
- CVE-2023-37627 SQL injection in code-projects:online restaurant management system
- CVE-2023-37625 Cross-site scripting in netbox:netbox
- CVE-2023-37624 Open redirect in netdisco:netdisco
- CVE-2023-37623 Cross-site scripting in netdisco:netdisco
- CVE-2023-3762 Intergard SGS sensitive information in memory
- CVE-2023-37613 Cross-site scripting in assemblysoftware:trialworks
- CVE-2023-37611 Neos CMS Cross Site Scripting vulnerability
- CVE-2023-3761 Intergard SGS Password Change cleartext transmission
- CVE-2023-37608 Hardcoded credentials in automaticsystems:soc fl9600 firstlane firmware
- CVE-2023-37607 Path traversal in automaticsystems:soc fl9600 firstlane firmware
- CVE-2023-37605 Denial of service in baramundi:enterprise mobility management
- CVE-2023-37602 Alkacon OpenCMS arbitrary file upload vulnerability
- CVE-2023-37601 Path traversal in mobisystems:office suite
- CVE-2023-37600 Cross-site scripting in mobisystems:office suite
- CVE-2023-3760 Intergard SGS Change Password denial of service
- CVE-2023-37599 Information disclosure in issabel:pbx
- CVE-2023-37598 Cross-site request forgery in issabel:pbx
- CVE-2023-37597 Cross-site request forgery in issabel:pbx
- CVE-2023-37596 Cross-site request forgery in issabel:pbx
- CVE-2023-3759 Intergard SGS permission
- CVE-2023-37582 Apache RocketMQ: Possible remote code execution when using the update configuration function
- CVE-2023-37581 Cross-site scripting in Apache Roller
- CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)
- CVE-2023-3758 Sssd: race condition during authorization leads to gpo policies functioning inconsistently
- CVE-2023-37579 Apache Pulsar Function Worker: Incorrect Authorization for Function Worker Can Leak Sink/Source Credentials
- CVE-2023-37578 Use after free in GTKWave
- CVE-2023-37577 Use after free in GTKWave
- CVE-2023-37576 Use after free in GTKWave
- CVE-2023-37575 Use after free in GTKWave
- CVE-2023-37574 Use after free in GTKWave
- CVE-2023-37573 Use after free in GTKWave
- CVE-2023-37572 Misconfiguration in softing:opc
- CVE-2023-37571 Cross-site scripting in softing:th scope
- CVE-2023-37570 Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite
- CVE-2023-3757 GZ Scripts Car Rental Script cross site scripting
- CVE-2023-37569 OS Command Injection Vulnerability in Emagic Data Center Management Suite
- CVE-2023-37568 Command injection in WRC-1167GEBK-S
- CVE-2023-37567 Command injection in LAN-W301NR
- CVE-2023-37566 Command injection in LAN-W301NR
- CVE-2023-37565 Code injection in WRC-1167FEBK-A
- CVE-2023-37564 Command injection in WRC-1167FEBK-A
- CVE-2023-37563 Information disclosure in WRC-1167FEBK-A
- CVE-2023-37562 Cross-site request forgery in WTC-C1167GC-B
- CVE-2023-37561 Open redirect in WRH-300WH-H
- CVE-2023-37560 Cross-site scripting in WRH-300WH-H
- CVE-2023-3756 Creativeitem Atlas Business Directory Listing search cross site scripting
- CVE-2023-37559 CODESYS Improper Validation of Consistency within Input in multiple products
- CVE-2023-37558 CODESYS Improper Validation of Consistency within Input in multiple products
- CVE-2023-37557 CODESYS Heap-based Buffer Overflow in multiple products
- CVE-2023-37556 CODESYS Improper Input Validation in CmpAppBP
- CVE-2023-37555 CODESYS Improper Input Validation in CmpAppBP
- CVE-2023-37554 CODESYS Improper Input Validation in CmpAppBP
- CVE-2023-37553 CODESYS Improper Input Validation in CmpAppBP
- CVE-2023-37552 CODESYS Improper Input Validation in CmpAppBP
- CVE-2023-37551 CODESYS Files or Directories Accessible to External Parties in CmpApp
- CVE-2023-37550 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-3755 Creativeitem Atlas Business Directory Listing filter_listings cross site scripting
- CVE-2023-37549 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-37548 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-37547 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-37546 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-37545 CODESYS: Improper Input Validation in CmpApp component
- CVE-2023-37544 Apache Pulsar WebSocket Proxy: Improper Authentication for WebSocket Proxy Endpoint Allows DoS
- CVE-2023-37543 Missing authorization in cacti:cacti
- CVE-2023-37541 HCL Connections is vulnerable to broken access control
- CVE-2023-37540 HCL Sametime Chat is affected by an unimplemented feature in the UI
- CVE-2023-3754 Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross site scripting
- CVE-2023-37539 HCL Domino Catalog template is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability
- CVE-2023-37538 HCL Digital Experience is susceptible to cross site scripting (XSS)
- CVE-2023-37537 HCL AppScan Presence deployed as Windows service might be vulnerable to an Unquoted Service Path vulnerability
- CVE-2023-37536 HCL BigFix Platform is vulnerable to an integer overflow in xerces-c++ 3.2.3
- CVE-2023-37535 HCL Domino Volt and Domino Leap are affected by a Cross-site scripting (XSS) vulnerability
- CVE-2023-37534 HCL Leap is affected by a Cross-site scripting (XSS) vulnerability
- CVE-2023-37533 HCL Connections is vulnerable to reflected cross-site scripting
- CVE-2023-37532 A path traversal vulnerability affects HCL Commerce
- CVE-2023-37531 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37530 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-3753 Creativeitem Mastery LMS browse cross site scripting
- CVE-2023-37529 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37528 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37527 A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform
- CVE-2023-37526 HCL DRYiCE Lucy v9 (now AEX) is affected by a Cross Origin Resource Sharing (CORS) Vulnerability
- CVE-2023-37525 HCL BigFix Compliance is vulnerable to a sensitive information disclosure
- CVE-2023-37524 Supply chain in Traveler for Microsoft Outlook
- CVE-2023-37523 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags
- CVE-2023-37522 HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags
- CVE-2023-37521 HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure
- CVE-2023-37520 HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)