Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 282 of 430.
- CVE-2023-3618 Segmentation fault in fax3encode in libtiff/tif_fax3.c
- CVE-2023-36177 Code injection in badaix:snapcast
- CVE-2023-3617 SourceCodester Best POS Management System Login Page admin_class.php sql injection
- CVE-2023-36163 Cross-site scripting in buildagate project:buildagate
- CVE-2023-36162 Cross-site request forgery in zzcms:zzcms
- CVE-2023-36161 Denial of service in quboworld:smart plug 10a firmware
- CVE-2023-36160 Information disclosure in quboworld:smart plug 10a firmware
- CVE-2023-3616 SQLi in Mava Softwares Hotel Management System
- CVE-2023-36159 Cross-site scripting in oretnom23:lost and found information system
- CVE-2023-36158 Cross-site scripting in oretnom23:toll tax management system
- CVE-2023-3615 Lack of server certificate validation in websockets connection
- CVE-2023-36146 Cross-site scripting in multilaser:re170 firmware
- CVE-2023-36144 Missing authorization in intelbras:sg 2404 mr firmware
- CVE-2023-36143 Command injection in maxprintisp:maxlink 1200g firmware
- CVE-2023-36141 Information disclosure in phpjabbers:cleaning business software
- CVE-2023-36140 Weak cryptography in phpjabbers:cleaning business software
- CVE-2023-3614 Denial of Service via specially crafted gif image
- CVE-2023-36139 Business logic in phpjabbers:cleaning business software
- CVE-2023-36138 Cross-site scripting in phpjabbers:cleaning business software
- CVE-2023-36137 Cross-site scripting in phpjabbers:class scheduling system
- CVE-2023-36136 Information disclosure in phpjabbers:class scheduling system
- CVE-2023-36135 Information disclosure in phpjabbers:class scheduling system
- CVE-2023-36134 Auth bypass in phpjabbers:class scheduling system
- CVE-2023-36133 Auth bypass in phpjabbers:availability booking calendar
- CVE-2023-36132 Missing authorization in phpjabbers:availability booking calendar
- CVE-2023-36131 Auth bypass in phpjabbers:availability booking calendar
- CVE-2023-3613 Guest accounts invited and added to channels by Welcomebot plugin
- CVE-2023-36127 Information disclosure in phpjabbers:appointment scheduler
- CVE-2023-36126 Cross-site scripting in phpjabbers:appointment scheduler
- CVE-2023-36123 Path traversal in plain craft launcher 2 project:plain craft launcher 2
- CVE-2023-36121 Cross-site scripting in e107:e107
- CVE-2023-3612 Unprotected WebView access in Govee Home App
- CVE-2023-36118 Cross-site scripting in faculty evaluation system project:faculty evaluation system
- CVE-2023-3611 Out-of-bounds write in Linux kernel's net/sched: sch_qfq component
- CVE-2023-36109 Memory corruption in jerryscript:jerryscript
- CVE-2023-36106 PowerJob incorrect access control vulnerability
- CVE-2023-36103 Command injection in tenda:ac15 firmware
- CVE-2023-36100 Privilege escalation in macwk:icecms
- CVE-2023-3610 Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-36097 fuadmin vulnerable to insecure file upload
- CVE-2023-36095 langchain Code Injection vulnerability
- CVE-2023-36093 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-36092 Auth bypass in dlink:dir-859 firmware
- CVE-2023-36091 Auth bypass in dlink:dir-895l firmware
- CVE-2023-36090 Auth bypass in dlink:dir-885l firmware
- CVE-2023-3609 Use-after-free in Linux kernel's net/sched: cls_u32 component
- CVE-2023-36089 Auth bypass in dlink:dir-645 firmware
- CVE-2023-36088 Server-side request forgery in vesoft:nebulagraph studio
- CVE-2023-36085 Open redirect in sisqualwfm:sisqualwfm
- CVE-2023-36082 Information disclosure in gatesair:flexiva fax 150w firmware
- CVE-2023-36081 Cross-site scripting in gatesair:flexiva fax 150w firmware
- CVE-2023-3608 Ruijie BCR810W Tracert Page os command injection
- CVE-2023-36076 SQL injection in pocketmanga:smanga
- CVE-2023-3607 kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection
- CVE-2023-3606 TamronOS ping os command injection
- CVE-2023-36054 Memory corruption in debian:debian linux
- CVE-2023-36053 Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
- CVE-2023-36052 Azure CLI REST Command Information Disclosure Vulnerability
- CVE-2023-36050 Microsoft Exchange Server Spoofing Vulnerability
- CVE-2023-3605 PHPGurukul Online Shopping Portal Registration Page excessive authentication
- CVE-2023-36049 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
- CVE-2023-36047 Windows Authentication Elevation of Privilege Vulnerability
- CVE-2023-36046 Windows Authentication Denial of Service Vulnerability
- CVE-2023-36045 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2023-36043 Open Management Infrastructure Information Disclosure Vulnerability
- CVE-2023-36042 Visual Studio Denial of Service Vulnerability
- CVE-2023-36041 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-3604 Change WP Admin < 1.1.4 - Secret Login Page Disclosure
- CVE-2023-36039 Microsoft Exchange Server Spoofing Vulnerability
- CVE-2023-36038 ASP.NET Core Denial of Service Vulnerability
- CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability
- CVE-2023-36036 Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation
- CVE-2023-36035 Microsoft Exchange Server Spoofing Vulnerability
- CVE-2023-36034 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36033 Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation
- CVE-2023-36031 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36030 Microsoft Dynamics 365 Sales Spoofing Vulnerability
- CVE-2023-3603 Processing sftp server read may cause null dereference
- CVE-2023-36029 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2023-36028 Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- CVE-2023-36027 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2023-36026 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2023-36025 Microsoft Windows SmartScreen Security Feature Bypass
- CVE-2023-36024 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2023-36022 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability
- CVE-2023-36020 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36019 Microsoft Power Platform Connector Spoofing Vulnerability
- CVE-2023-36018 Visual Studio Code Jupyter Extension Spoofing Vulnerability
- CVE-2023-36017 Windows Scripting Engine Memory Corruption Vulnerability
- CVE-2023-36016 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-36014 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36013 PowerShell Information Disclosure Vulnerability
- CVE-2023-36012 DHCP Server Service Information Disclosure Vulnerability
- CVE-2023-36011 Win32k Elevation of Privilege Vulnerability
- CVE-2023-36010 Microsoft Defender Denial of Service Vulnerability
- CVE-2023-3601 Simple Author Box < 2.52 - Contributor+ Arbitrary User Information Disclosure via IDOR
- CVE-2023-36009 Microsoft Word Information Disclosure Vulnerability
- CVE-2023-36008 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-36007 Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability