Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 274 of 430.
- CVE-2023-37215 JBL soundbar multibeam 5.1 - CWE-798: Use of Hard-coded Credentials
- CVE-2023-37214 Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection
- CVE-2023-37213 Synel SYnergy Fingerprint Terminals - CWE-78: 'OS Command Injection'
- CVE-2023-37212 Memory corruption in Firefox
- CVE-2023-37211 Memory corruption in Firefox
- CVE-2023-37210 Security feature bypass in Firefox
- CVE-2023-3721 WP-EMail < 2.69.1 - Admin+ Stored Cross-Site Scripting
- CVE-2023-37209 Use after free in Firefox
- CVE-2023-37208 Security feature bypass in Firefox
- CVE-2023-37207 Security feature bypass in Firefox
- CVE-2023-37206 Information disclosure in Firefox
- CVE-2023-37205 Other in Firefox
- CVE-2023-37204 Security feature bypass in Firefox
- CVE-2023-37203 Security feature bypass in Firefox
- CVE-2023-37202 Use after free in Firefox
- CVE-2023-37201 Use after free in Firefox
- CVE-2023-37200 XML external entity in EcoStruxure OPC UA Server Expert
- CVE-2023-3720 Upload Media By URL < 1.0.8 - Stored XSS via CSRF
- CVE-2023-37199 Code injection in StruxureWare Data Center Expert
- CVE-2023-37198 Code injection in StruxureWare Data Center Expert
- CVE-2023-37197 SQL injection in StruxureWare Data Center Expert
- CVE-2023-37196 SQL injection in StruxureWare Data Center Expert
- CVE-2023-37195 Denial of service in SIMATIC CP 1604
- CVE-2023-37194 Privilege escalation in SIMATIC CP 1604
- CVE-2023-37192 Memory corruption in bitcoin:bitcoin core
- CVE-2023-37191 Cross-site scripting in issabel:pbx
- CVE-2023-37190 Cross-site scripting in issabel:pbx
- CVE-2023-37189 Cross-site scripting in issabel:pbx
- CVE-2023-37188 Null dereference in blosc:c-blosc2
- CVE-2023-37187 Null dereference in blosc:c-blosc2
- CVE-2023-37186 Null dereference in blosc:c-blosc2
- CVE-2023-37185 Null dereference in blosc:c-blosc2
- CVE-2023-3718 Authenticated Command Injection Vulnerability in AOS-CX Command Line Interface
- CVE-2023-37177 SQL injection in sigb:pmb
- CVE-2023-37174 Memory corruption in gpac:gpac
- CVE-2023-37173 Command injection in totolink:a3300r firmware
- CVE-2023-37172 Command injection in totolink:a3300r firmware
- CVE-2023-37171 Command injection in totolink:a3300r firmware
- CVE-2023-37170 Command injection in totolink:a3300r firmware
- CVE-2023-3717 SQLi in Farmakoms Remote Administration Console
- CVE-2023-37165 SQL injection in millhouse-project project:millhouse-project
- CVE-2023-37164 Cross-site scripting in diafan:diafan.cms
- CVE-2023-3716 SQLi in Oduyo Online Collection Software
- CVE-2023-37154 check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \${IFS}.
- CVE-2023-37153 Cross-site scripting in kodcloud:kodexplorer
- CVE-2023-37152 File upload in online art gallery project:online art gallery
- CVE-2023-37150 Cross-site scripting in online pizza ordering system project:online pizza ordering system
- CVE-2023-37149 Command injection in totolink:lr350 firmware
- CVE-2023-37148 Command injection in totolink:lr350 firmware
- CVE-2023-37146 Command injection in totolink:lr350 firmware
- CVE-2023-37145 Command injection in totolink:lr350 firmware
- CVE-2023-37144 Command injection in tendacn:ac10 firmware
- CVE-2023-37143 Denial of service in microsoft:chakracore
- CVE-2023-37142 Denial of service in microsoft:chakracore
- CVE-2023-37141 Denial of service in microsoft:chakracore
- CVE-2023-37140 Denial of service in microsoft:chakracore
- CVE-2023-3714 ProfileGrid <= 5.5.2 - Missing Authorization to Arbitrary Group Option Modification and Privilege Escalation
- CVE-2023-37139 Memory corruption in microsoft:chakracore
- CVE-2023-37136 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-37135 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-37134 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-37133 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-37132 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-37131 Cross-site request forgery in yzncms:yzncms
- CVE-2023-3713 ProfileGrid <= 5.5.1 - Authenticated (Subscriber+) Arbitrary Option Update
- CVE-2023-37125 Cross-site scripting in seacms:seacms
- CVE-2023-37124 Cross-site scripting in seacms:seacms
- CVE-2023-37122 Cross-site scripting in bagesoft:bagecms
- CVE-2023-3712 Potential user privilege escalation
- CVE-2023-37117 Use after free in live555:live555
- CVE-2023-3711 Potential Predictable Session ID
- CVE-2023-3710 Printer web page invalid command execution
- CVE-2023-3709 Royal Elementor Addons <=1.3.70 - Unauthenticated MailChimp API Key Disclosure
- CVE-2023-3708 Multiple DeoThemes Themes <= (Various Versions) - Reflected Cross-Site Scripting
- CVE-2023-37070 Cross-site scripting in code-projects:hospital information system
- CVE-2023-3707 ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Content Disclosure
- CVE-2023-37069 SQL injection in online hospital management system project:online hospital management system
- CVE-2023-37068 SQL injection in sherlock:gym management system
- CVE-2023-37067 Cross-site scripting in chamilo:chamilo
- CVE-2023-37066 Cross-site scripting in chamilo:chamilo
- CVE-2023-37065 Cross-site scripting in chamilo:chamilo
- CVE-2023-37064 Cross-site scripting in chamilo:chamilo
- CVE-2023-37063 Cross-site scripting in chamilo:chamilo
- CVE-2023-37062 Cross-site scripting in chamilo:chamilo
- CVE-2023-37061 Cross-site scripting in chamilo:chamilo
- CVE-2023-3706 ActivityPub for WordPress < 1.0.0 - Subscriber+ Arbitrary Post Title Disclosure
- CVE-2023-37058 Privilege escalation in unionman:jlink ax1800 firmware
- CVE-2023-37057 An issue in JLINK Unionman Technology Co.
- CVE-2023-3705 Information Disclosure Vulnerability in CP-Plus Network Video Recorder
- CVE-2023-37049 Missing authorization in emlog:emlog
- CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder
- CVE-2023-37039 A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95
- CVE-2023-37038 Null dereference in linuxfoundation:magma
- CVE-2023-37037 Null dereference in linuxfoundation:magma
- CVE-2023-37036 Null dereference in linuxfoundation:magma
- CVE-2023-37035 A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95
- CVE-2023-37034 Null dereference in linuxfoundation:magma
- CVE-2023-37033 Null dereference in linuxfoundation:magma
- CVE-2023-37032 Memory corruption in linuxfoundation:magma
- CVE-2023-37031 Null dereference in linuxfoundation:magma