Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 281 of 430.
- CVE-2023-36361 SQL injection in web-audimex:audimexee
- CVE-2023-3636 WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-36359 Memory corruption in tp-link:tl-wr841n firmware
- CVE-2023-36358 Memory corruption in tp-link:tl-wr743nd firmware
- CVE-2023-36357 Denial of service in tp-link:tl-wr841n firmware
- CVE-2023-36356 Memory corruption in tp-link:tl-wr740n firmware
- CVE-2023-36355 Memory corruption in tp-link:tl-wr940n firmware
- CVE-2023-36354 Memory corruption in tp-link:tl-wr740n firmware
- CVE-2023-36351 Code injection in viatomtech:vihealth
- CVE-2023-3635 Okio GzipSource unhandled exception Denial of Service
- CVE-2023-36348 Missing authorization in codekop:codekop
- CVE-2023-36347 Auth bypass in codekop:codekop
- CVE-2023-36346 Cross-site scripting in codekop:codekop
- CVE-2023-36345 Cross-site request forgery in codekop:codekop
- CVE-2023-36344 Other in dieboldnixdorf:vynamic view
- CVE-2023-36340 Memory corruption in totolink:nr1800x firmware
- CVE-2023-3634 Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
- CVE-2023-36339 Missing authorization in webboss:webboss.io cms
- CVE-2023-36338 SQL injection in inventory management system project:inventory management system
- CVE-2023-36337 Cross-site scripting in inventory management system project:inventory management system
- CVE-2023-36331 Missing authorization in exrick:xmall
- CVE-2023-3633 Out of Bounds Memory Corruption Issue in CEVA Engine
- CVE-2023-36328 Integer overflow in fedoraproject:fedora
- CVE-2023-36327 Integer overflow in relic project:relic
- CVE-2023-36326 Integer overflow in relic project:relic
- CVE-2023-36325 i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation att
- CVE-2023-36321 Memory corruption in covesa:dlt-daemon
- CVE-2023-3632 Hard-coded Cryptographic Key in Kunduz - Homework Helper App
- CVE-2023-36319 File upload in openupload project:openupload
- CVE-2023-36317 Cross-site scripting in oretnom23:student study center desk management system
- CVE-2023-36315 Cross-site scripting in phpjabbers:callback widget
- CVE-2023-36314 Cross-site scripting in phpjabbers:callback widget
- CVE-2023-36313 Cross-site scripting in phpjabbers:document creator
- CVE-2023-36312 Cross-site scripting in phpjabbers:callback widget
- CVE-2023-36311 SQL injection in phpjabbers:document creator
- CVE-2023-36310 Cross-site scripting in phpjabbers:document creator
- CVE-2023-3631 SQLi in Medart Notification Panel
- CVE-2023-36309 Cross-site scripting in phpjabbers:document creator
- CVE-2023-36308 Crash when processing crafted TIFF files
- CVE-2023-36307 Index out of bounds leading to crash
- CVE-2023-36306 Cross-site scripting in adiscon:loganalyzer
- CVE-2023-36301 Path traversal in talend:data catalog
- CVE-2023-36299 File upload in typecho:typecho
- CVE-2023-36298 File upload in dedecms:dedecms
- CVE-2023-36293 SQL injection in wmanager:wmanager
- CVE-2023-36291 Cross-site scripting in maxsite:maxsite cms
- CVE-2023-3629 Infinispan: non-admins should not be able to get cache config via rest api
- CVE-2023-36289 Cross-site scripting in webkul:qloapps
- CVE-2023-36288 Cross-site scripting in webkul:qloapps
- CVE-2023-36287 Cross-site scripting in webkul:qloapps
- CVE-2023-36284 SQL injection in webkul:qloapps
- CVE-2023-36281 langchain vulnerable to arbitrary code execution
- CVE-2023-3628 Infispan: rest bulk ops don't check permissions
- CVE-2023-36274 Memory corruption in gnu:libredwg
- CVE-2023-36273 Memory corruption in gnu:libredwg
- CVE-2023-36272 Memory corruption in gnu:libredwg
- CVE-2023-36271 Memory corruption in gnu:libredwg
- CVE-2023-3627 Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-core
- CVE-2023-36266 Information disclosure in keepersecurity:keeper
- CVE-2023-36263 SQL injection in store-opart:op\'art limit quantity
- CVE-2023-36260 Craft CMS Feed-Me
- CVE-2023-3626 File upload in Mountain Flood Disaster Prevention Monitoring and Early Warning System
- CVE-2023-36259 Craft CMS Audit Plugin Cross Site Scripting vulnerability
- CVE-2023-36258 langchain arbitrary code execution vulnerability
- CVE-2023-36256 Cross-site request forgery in online examination system project:online examination system
- CVE-2023-36255 Code injection in eramba:eramba
- CVE-2023-36252 XML external entity in ateme:flamingo xl firmware
- CVE-2023-36250 Code injection in gnome:gnome-time tracker
- CVE-2023-3625 File upload in Mountain Flood Disaster Prevention Monitoring and Early Warning System
- CVE-2023-36243 Memory corruption in flvmeta:flvmeta
- CVE-2023-3624 Nesote Inout Blockchain FiatExchanger POST Parameter update_marketboxslider sql injection
- CVE-2023-36239 Memory corruption in libming:libming
- CVE-2023-36238 Bagisto vulnerable to Insecure Direct Object Reference (IDOR)
- CVE-2023-36237 Bagisto Cross-Site Request Forgery vulnerability
- CVE-2023-36236 Cross-site Scripting in Bagisto
- CVE-2023-36235 Missing authorization in webkul:qloapps
- CVE-2023-36234 Cross-site scripting in netbox:netbox
- CVE-2023-3623 File upload in Mountain Flood Disaster Prevention Monitoring and Early Warning System
- CVE-2023-36223 Cross-site scripting in bbs-go:bbs-go
- CVE-2023-36222 Cross-site scripting in bbs-go:bbs-go
- CVE-2023-36220 Path traversal in textpattern:textpattern
- CVE-2023-3622 Access Control Bypass Vulnerability in the SolarWinds Platform
- CVE-2023-36217 Cross-site scripting in xoops:xoops
- CVE-2023-36213 SQL injection in motocms:motocms
- CVE-2023-36212 File upload in totalcms:total cms
- CVE-2023-36211 Cross-site scripting in cubiclesoft:barebones cms
- CVE-2023-36210 Code injection in motocms:motocms
- CVE-2023-3621 IBOS OA Delete Packet delete createDeleteCommand sql injection
- CVE-2023-36201 Memory corruption in jerryscript:jerryscript
- CVE-2023-3620 Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.js
- CVE-2023-36199 Null dereference in skale:sgxwallet
- CVE-2023-36198 Memory corruption in skale:sgxwallet
- CVE-2023-36193 Memory corruption in lcdf:gifsicle
- CVE-2023-36192 Memory corruption in irontec:sngrep
- CVE-2023-3619 SourceCodester AC Repair and Services System HTTP POST Request sql injection
- CVE-2023-36189 langchain SQL Injection vulnerability
- CVE-2023-36188 langchain vulnerable to arbitrary code execution
- CVE-2023-36187 Memory corruption in netgear:cbr40 firmware
- CVE-2023-36184 Memory corruption in aptosfoundation:aptos
- CVE-2023-36183 Memory corruption in openimageio:openimageio