Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 271 of 430.
- CVE-2023-3752 Creativeitem Academy LMS courses cross site scripting
- CVE-2023-37519 HCL BigFix Platform is affected by Unathenticated Stored Cross-Site Scripting (XSS)
- CVE-2023-37518 A code injection vulnerability affects HCL BigFix ServiceNow Data Flow
- CVE-2023-37517 HCL Domino Volt and Domino Leap are affected by missing "no cache" headers
- CVE-2023-37516 HCL Leap is affected by missing "no cache" headers
- CVE-2023-37513 HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher
- CVE-2023-37512 HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher
- CVE-2023-37511 HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content
- CVE-2023-3751 Super Store Finder POST Parameter index.php sql injection
- CVE-2023-37508 HCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerability
- CVE-2023-37507 An information disclosure vulnerability affects HCL DevOps Plan
- CVE-2023-37504 An insufficient session expiration vulnerability affects HCL Compass
- CVE-2023-37503 A weak password requirements vulnerability affects HCL Compass
- CVE-2023-37502 An unrestricted file upload vulnerability affects HCL Compass
- CVE-2023-37501 A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Campaign
- CVE-2023-37500 A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
- CVE-2023-3750 Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
- CVE-2023-37499 A Persistent Cross-site Scripting (XSS) vulnerability affects HCL Unica Platform
- CVE-2023-37498 HCL Unica Platform is vulnerable to a privilege escalation by unauthorized group assignation
- CVE-2023-37497 An XML External Entity (XXE) Injection Vulnerability affects HCL Unica Platform
- CVE-2023-37496 HCL Verse is susceptible to a Stored Cross-Site Scripting (XSS) Vulnerability
- CVE-2023-37495 HCL Domino is susceptible to a weak cryptography vulnerability
- CVE-2023-37492 Missing Authorization check in SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2023-37491 Improper Authorization check vulnerability in SAP Message Server
- CVE-2023-37490 Binary hijack in SAP BusinessObjects Business Intelligence (Installer)
- CVE-2023-3749 VideoEdge config
- CVE-2023-37489 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)
- CVE-2023-37488 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Process Integration
- CVE-2023-37487 Security misconfiguration vulnerability in SAP Business One (Service Layer)
- CVE-2023-37486 Information Disclosure vulnerability in SAP Commerce (OCC API)
- CVE-2023-37484 Information Disclosure Vulnerabilities in SAP PowerDesigner
- CVE-2023-37483 Improper Access Control Vulnerabilities in SAP PowerDesigner
- CVE-2023-37482 Information disclosure in SIMATIC Drive Controller CPU 1504D TF
- CVE-2023-37481 Fides Webserver Vulnerable to SVG Bomb File Uploads
- CVE-2023-37480 Fides Webserver Vulnerable to Zip Bomb File Uploads
- CVE-2023-3748 Inifinite loop in babld message parsing may cause dos
- CVE-2023-37479 Improper sanitization of MXCSR and RFLAGS in OpenEnclave
- CVE-2023-37478 pnpm incorrectly parses tar archives relative to specification
- CVE-2023-37477 Command injection in firewall ip functionality in 1Panel
- CVE-2023-37476 Zip slip in OpenRefine
- CVE-2023-37475 Attacker-controlled parameter can cause denial of service in hamba avro
- CVE-2023-37474 Path traversal in copyparty
- CVE-2023-37473 Limited code execution in zenstruck/collections
- CVE-2023-37472 Query injection in Knowage server
- CVE-2023-37471 User impersonation using SAMLv1.x SSO in Open Access Management
- CVE-2023-37470 Metabase vulnerable to remote code execution via POST /api/setup/validate API endpoint
- CVE-2023-3747 Insufficient Validation on Override Codes for Always-Enabled WARP Mode
- CVE-2023-37469 CasaOS Command Injection vulnerability
- CVE-2023-37468 Storing unencrypted LDAP passwords in feedbacksystem
- CVE-2023-37467 Discourse CSP nonce reuse vulnerability for anonymous users
- CVE-2023-37466 vm2 Sandbox Escape vulnerability
- CVE-2023-37464 Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose
- CVE-2023-37463 Quadratic complexity bugs may lead to a denial of service
- CVE-2023-37462 org.xwiki.platform:xwiki-platform-skin-ui Eval Injection vulnerability
- CVE-2023-37461 Path traversal in metersphere
- CVE-2023-37460 Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver
- CVE-2023-3746 ActivityPub for WordPress < 1.0.1 - Contributor+ Stored XSS
- CVE-2023-37459 Out-of-bounds read when processing a received IPv6 packet
- CVE-2023-37457 Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'
- CVE-2023-37456 Null dereference in Firefox for iOS
- CVE-2023-37455 Security feature bypass in Firefox for iOS
- CVE-2023-37454 Use after free in linux:linux kernel
- CVE-2023-37453 Memory corruption in linux:linux kernel
- CVE-2023-37450 Apple Multiple Products WebKit Code Execution
- CVE-2023-3745 Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h
- CVE-2023-37448 Security feature bypass in macOS
- CVE-2023-37447 Memory corruption in GTKWave
- CVE-2023-37446 Memory corruption in GTKWave
- CVE-2023-37445 Memory corruption in GTKWave
- CVE-2023-37444 Memory corruption in GTKWave
- CVE-2023-37443 Memory corruption in GTKWave
- CVE-2023-37442 Memory corruption in GTKWave
- CVE-2023-37440 Authenticated Server-Side Request Forgery (SSRF) Leading to Information Disclosure
- CVE-2023-3744 Server-Side Request Forgery in SLiMS
- CVE-2023-37439 Reflected Cross Site Scripting in EdgeConnect SD-WAN Orchestrator Web Management Interface
- CVE-2023-37438 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37437 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37436 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37435 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37434 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37433 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37432 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37431 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37430 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-3743 SQL injection vulnerability in LeoTheme's Ap Page Builder
- CVE-2023-37429 Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
- CVE-2023-37428 Path traversal in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37427 Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37426 Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37425 Cross-site scripting in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37424 Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
- CVE-2023-37423 Cross-site scripting in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37422 Cross-site scripting in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37421 Cross-site scripting in EdgeConnect SD-WAN Orchestrator
- CVE-2023-37420 Memory corruption in GTKWave
- CVE-2023-3742 Security feature bypass in Chrome
- CVE-2023-37419 Memory corruption in GTKWave
- CVE-2023-37418 Memory corruption in GTKWave
- CVE-2023-37417 Memory corruption in GTKWave
- CVE-2023-37416 Memory corruption in GTKWave