Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 276 of 430.
- CVE-2023-36892 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2023-36891 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2023-36890 Microsoft SharePoint Server Information Disclosure Vulnerability
- CVE-2023-3689 Bylancer QuickQR GET Parameter blog sql injection
- CVE-2023-36889 Windows Group Policy Security Feature Bypass Vulnerability
- CVE-2023-36888 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
- CVE-2023-36887 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36886 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36884 Microsoft Windows Search Remote Code Execution
- CVE-2023-36883 Microsoft Edge for iOS Spoofing Vulnerability
- CVE-2023-36882 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36881 Azure Apache Ambari Spoofing Vulnerability
- CVE-2023-36880 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2023-3688 Bylancer QuickJob GET Parameter sql injection
- CVE-2023-36878 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2023-36877 Azure Apache Oozie Spoofing Vulnerability
- CVE-2023-36876 Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
- CVE-2023-36874 Microsoft Windows Error Reporting Service Privilege Escalation
- CVE-2023-36873 .NET Framework Spoofing Vulnerability
- CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability
- CVE-2023-36871 Azure Active Directory Security Feature Bypass Vulnerability
- CVE-2023-3687 Bylancer QuickVCard GET Parameter blog sql injection
- CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability
- CVE-2023-36868 Azure Service Fabric on Windows Information Disclosure Vulnerability
- CVE-2023-36867 Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
- CVE-2023-36866 Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2023-36865 Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2023-36864 Integer overflow in GTKWave
- CVE-2023-36862 Security feature bypass in macOS
- CVE-2023-36861 Memory corruption in GTKWave
- CVE-2023-36860 Privilege escalation in Intel Unison software
- CVE-2023-3686 Bylancer QuickAI OpenAI GET Parameter blog sql injection
- CVE-2023-36859 PiiGAB M-Bus Code Injection
- CVE-2023-36858 BIG-IP Edge Client for Windows and macOS vulnerability
- CVE-2023-36857 Baker Hughes Bently Nevada 3500 System Authentication Bypass by Capture-replay
- CVE-2023-36854 Other in macOS
- CVE-2023-36853 Keysight Geolocation Server Exposed Dangerous Method or Function
- CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function
- CVE-2023-36850 Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.
- CVE-2023-3685 Nesote Inout Search Engine AI Edition index.php cross site scripting
- CVE-2023-36849 Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received
- CVE-2023-36848 Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet
- CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function
- CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function
- CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification
- CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification
- CVE-2023-36843 Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled
- CVE-2023-36842 Junos OS: jdhcpd will hang on receiving a specific DHCP packet
- CVE-2023-36841 Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service
- CVE-2023-36840 Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run
- CVE-2023-3684 LivelyWorks Articart Base64 Encoding de_DE redirect
- CVE-2023-36839 Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received
- CVE-2023-36838 Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command
- CVE-2023-36836 Denial of service in Junos OS
- CVE-2023-36835 Denial of service in Junos OS
- CVE-2023-36834 Denial of service in Junos OS
- CVE-2023-36833 Use after free in Junos OS Evolved
- CVE-2023-36832 Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface
- CVE-2023-36831 Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
- CVE-2023-36830 SQLFluff vulnerability for users with access to config file, using `library_path` to call arbitrary python code.
- CVE-2023-3683 LivelyWorks Articart search cross site scripting
- CVE-2023-36829 Sentry CORS misconfiguration vulnerability
- CVE-2023-36828 Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
- CVE-2023-36827 Fides vulnerable to Path Traversal in Webserver API
- CVE-2023-36826 Sentry vulnerable to improper authorization on debug and artifact file downloads
- CVE-2023-36825 Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution
- CVE-2023-36824 Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis
- CVE-2023-36823 Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
- CVE-2023-36822 Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss
- CVE-2023-36821 Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
- CVE-2023-36820 micronaut security has invalid IdTokenClaimsValidator logic on aud
- CVE-2023-3682 Nesote Inout Blockchain EasyPayments POST Parameter getcoinaddress sql injection
- CVE-2023-36819 Knowage-Server vulnerable to Path traversal in download functionalities
- CVE-2023-36818 Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse
- CVE-2023-36817 The King's Temple Church website Leaked Stripe API Key in Public Code Repository
- CVE-2023-36816 Cross-Site Scripting (XSS) at Account creation in 2FAuth
- CVE-2023-36815 Sealos billing system permission control defect
- CVE-2023-36814 Products.CMFCore unauthenticated denial of service and crash via unchecked use of input with Python's marshal module
- CVE-2023-36813 Kanboard Authenticated SQL Injections vulnerability
- CVE-2023-36812 Remote Code Execution in OpenTSDB
- CVE-2023-36811 Archive spoofing vulnerability in borgbackup
- CVE-2023-36810 Quadratic runtime with malformed PDF missing xref marker in pypdf
- CVE-2023-3681 Campcodes Retro Cellphone Online Store modal_add_product.php cross site scripting
- CVE-2023-36809 Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox
- CVE-2023-36808 GLPI vulnerable to SQL injection through Computer Virtual Machine information
- CVE-2023-36807 Infinite Loop when reading malformed objects in pypdf
- CVE-2023-36806 Contao cross site scripting vulnerability via input unit widget
- CVE-2023-36805 Windows MSHTML Platform Security Feature Bypass Vulnerability
- CVE-2023-36804 Windows GDI Elevation of Privilege Vulnerability
- CVE-2023-36803 Windows Kernel Information Disclosure Vulnerability
- CVE-2023-36802 Microsoft Streaming Service Proxy Privilege Escalation
- CVE-2023-36801 DHCP Server Service Information Disclosure Vulnerability
- CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability
- CVE-2023-3680 SourceCodester Lost and Found Information System HTTP POST Request sql injection
- CVE-2023-36799 .NET Core and Visual Studio Denial of Service Vulnerability
- CVE-2023-36796 Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36794 Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36793 Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36792 Visual Studio Remote Code Execution Vulnerability
- CVE-2023-36790 Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability