Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 273 of 430.
- CVE-2023-37310 D-Link DAP-2622 DDP Set Device Info Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-3731 Use after free in Chrome
- CVE-2023-37308 Cross-site scripting in zohocorp:manageengine adaudit plus
- CVE-2023-37307 Cross-site scripting in misp-project:misp
- CVE-2023-37306 Information disclosure in misp-project:misp
- CVE-2023-37305 Information disclosure in mediawiki:mediawiki
- CVE-2023-37304 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-37303 Other in mediawiki:mediawiki
- CVE-2023-37302 MediaWiki Cross-site Scripting vulnerability
- CVE-2023-37301 Security feature bypass in mediawiki:mediawiki
- CVE-2023-37300 Missing authorization in mediawiki:mediawiki
- CVE-2023-3730 Use after free in Chrome
- CVE-2023-37299 Joplin Cross-site Scripting vulnerability
- CVE-2023-37298 Joplin Cross-site Scripting vulnerability
- CVE-2023-37297 heap memory overflow
- CVE-2023-37296 Stack-based Buffer Overflow
- CVE-2023-37295 Heap-based Buffer Overflow
- CVE-2023-37294 Heap-based Buffer Overflow
- CVE-2023-37293 stack-based buffer overflow
- CVE-2023-37292 HGiga iSherlock - Command Injection
- CVE-2023-37291 Galaxy Software Services Vitals ESP - Use of Hard-coded Cryptographic Key
- CVE-2023-37290 InfoDoc Document On-line Submission and Approval System - Server-Side Request Forgery (SSRF)
- CVE-2023-3729 Use after free in Chrome
- CVE-2023-37289 InfoDoc Document On-line Submission and Approval System - Arbitrary File Upload
- CVE-2023-37288 SmartBPM.NET - Path Traversal
- CVE-2023-37287 SmartBPM.NET - Use of Hard-Coded Credentials - 2
- CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1
- CVE-2023-37285 Memory corruption in iOS and iPadOS
- CVE-2023-37284 Auth bypass in Archer C20
- CVE-2023-37283 Authentication Bypass via HTML Form & Identifier First Adapter
- CVE-2023-37282 Memory corruption in GTKWave
- CVE-2023-37281 Out-of-bounds read during IPHC address decompression
- CVE-2023-37280 Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page
- CVE-2023-3728 Use after free in Chrome
- CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input
- CVE-2023-37278 GLPI vulnerable to SQL injection via dashboard administration
- CVE-2023-37277 XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
- CVE-2023-37276 aiohttp vulnerable to HTTP request smuggling
- CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
- CVE-2023-37274 Python code execution sandbox escape in non-docker version in Auto-GPT
- CVE-2023-37273 Docker escape in Auto-GPT when running from docker-compose.yml included in git repo
- CVE-2023-37272 XSS vulnerability in JOC Cockpit branch 1.13
- CVE-2023-37271 RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape
- CVE-2023-37270 Piwigo SQL Injection vulnerability in "User-Agent"
- CVE-2023-3727 Use after free in Chrome
- CVE-2023-37269 Winter CMS vulnerable to stored XSS through privileged upload of SVG file
- CVE-2023-37268 User login confusion with SSO in warpgate
- CVE-2023-37267 Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
- CVE-2023-37266 Weak json web token (JWT) secrets in CasaOS
- CVE-2023-37265 Incorrect identification of source IP addresses in CasaOS
- CVE-2023-37264 Pipelines do not validate child UIDs
- CVE-2023-37263 Strapi's field level permissions not being respected in relationship title
- CVE-2023-37262 CC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by Default
- CVE-2023-37261 OpenComputers's SSRF to cloud service metadata services and local IPv6 addresses not blocked by default
- CVE-2023-37260 league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
- CVE-2023-3726 OCSInventory-ocsreports 2.12.0 - Stored cross-site Scripting
- CVE-2023-37259 Cross site scripting in Export Chat feature
- CVE-2023-37258 DataEase has a SQL injection vulnerability that can bypass blacklists
- CVE-2023-37257 The DataEase panel and dataset have a stored XSS vulnerability
- CVE-2023-37256 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-37255 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-37254 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-37253 Information disclosure in ProofreadPage
- CVE-2023-37252 Information disclosure in CheckUser
- CVE-2023-37251 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-37250 Race condition in unity:parsec
- CVE-2023-3725 Potential buffer overflow vulnerability in the Zephyr CANbus subsystem
- CVE-2023-37249 Command injection in infoblox:nios
- CVE-2023-37248 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-37247 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-37246 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-37245 Memory corruption in EMUI
- CVE-2023-37244 Privilege escalation in N-Able's AutomationManagerAgent
- CVE-2023-37243 Privilege escalation in Atera Agent Package Availability
- CVE-2023-37242 Other in EMUI
- CVE-2023-37241 Denial of service in EMUI
- CVE-2023-37240 Memory corruption in EMUI
- CVE-2023-3724 TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension
- CVE-2023-37239 Memory corruption in EMUI
- CVE-2023-37238 Missing authorization in EMUI
- CVE-2023-37237 Command injection in veritas:netbackup appliance
- CVE-2023-37234 Misconfiguration in loftware:spectrum
- CVE-2023-37233 XML external entity in loftware:spectrum
- CVE-2023-37232 Information disclosure in loftware:spectrum
- CVE-2023-37231 Hardcoded credentials in loftware:spectrum
- CVE-2023-37230 Server-side request forgery in loftware:spectrum
- CVE-2023-37229 Server-side request forgery in loftware:spectrum
- CVE-2023-37227 Deserialization in loftware:spectrum
- CVE-2023-37226 Auth bypass in loftware:spectrum
- CVE-2023-37225 Cross-site scripting in pexip:pexip infinity
- CVE-2023-37224 Information disclosure in archerirm:archer
- CVE-2023-37223 Cross-site scripting in archerirm:archer
- CVE-2023-37222 Farsight Tech Nordic AB ProVide
- CVE-2023-37221 7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
- CVE-2023-37220 Synel Terminals - CWE-494: Download of Code Without Integrity Check
- CVE-2023-3722 Avaya Aura Device Services Remote Code Execution
- CVE-2023-37219 Tadiran Telecom Composit - CWE-1236: Improper Neutralization of Formula Elements in a CSV File
- CVE-2023-37218 Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
- CVE-2023-37217 Tadiran Telecom Aeonix - CWE-204: Observable Response Discrepancy
- CVE-2023-37216 AnaSystem SensMini M4 – an authenticated user can cause Denial of Service