Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 283 of 430.
- CVE-2023-36006 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36005 Windows Telephony Server Elevation of Privilege Vulnerability
- CVE-2023-36004 Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
- CVE-2023-36003 XAML Diagnostics Elevation of Privilege Vulnerability
- CVE-2023-36002 ITM Server Missing Authorization for URL validation
- CVE-2023-36000 ITM Server Missing Authorization for Agent Config
- CVE-2023-3600 Use-after-free in workers
- CVE-2023-35998 ITM Server Missing Authorization in SOAP Endpoints
- CVE-2023-35997 Memory corruption in GTKWave
- CVE-2023-35996 Memory corruption in GTKWave
- CVE-2023-35995 Memory corruption in GTKWave
- CVE-2023-35994 Memory corruption in GTKWave
- CVE-2023-35993 Use after free in iOS and iPadOS
- CVE-2023-35992 Integer overflow in GTKWave
- CVE-2023-35991 Auth bypass in LAN-W300N/DR
- CVE-2023-35990 Information disclosure in iOS and iPadOS
- CVE-2023-3599 SourceCodester Best Fee Management System Add User admin_class.php save_user access control
- CVE-2023-35989 Integer overflow in GTKWave
- CVE-2023-35987 PiiGAB M-Bus Use of Hard-coded Credentials
- CVE-2023-35986 Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow
- CVE-2023-35985 Code injection in Foxit Reader
- CVE-2023-35984 Memory corruption in iOS and iPadOS
- CVE-2023-35983 Security feature bypass in macOS
- CVE-2023-35982 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-35981 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-35980 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-3598 Memory corruption in Chrome
- CVE-2023-35979 Unauthenticated Buffer Overflow Vulnerability in ArubaOS Web-Based Management Interface
- CVE-2023-35978 Reflected Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface
- CVE-2023-35977 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
- CVE-2023-35976 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
- CVE-2023-35975 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion
- CVE-2023-35974 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-35973 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-35972 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-35971 Unauthenticated Stored Cross-Site Scripting (XSS) in ArubaOS Web-based Management Interface
- CVE-2023-35970 Memory corruption in GTKWave
- CVE-2023-3597 Keycloak: secondary factor bypass in step-up authentication
- CVE-2023-35969 Memory corruption in GTKWave
- CVE-2023-35968 Memory corruption in YF325
- CVE-2023-35967 Memory corruption in YF325
- CVE-2023-35966 Memory corruption in YF325
- CVE-2023-35965 Memory corruption in YF325
- CVE-2023-35964 Command injection in GTKWave
- CVE-2023-35963 Command injection in GTKWave
- CVE-2023-35962 Command injection in GTKWave
- CVE-2023-35961 Command injection in GTKWave
- CVE-2023-35960 Command injection in GTKWave
- CVE-2023-3596 Rockwell Automation Allen-Bradley ControlLogix Communication Modules vulnerable to Denial of Service
- CVE-2023-35959 Command injection in GTKWave
- CVE-2023-35958 Memory corruption in GTKWave
- CVE-2023-35957 Memory corruption in GTKWave
- CVE-2023-35956 Memory corruption in GTKWave
- CVE-2023-35955 Memory corruption in GTKWave
- CVE-2023-35953 Memory corruption in libigl
- CVE-2023-35952 Memory corruption in libigl
- CVE-2023-35951 Memory corruption in libigl
- CVE-2023-35950 Memory corruption in libigl
- CVE-2023-3595 Rockwell Automation ControlLogix Communication Modules Vulnerable to Remote Code Execution
- CVE-2023-35949 Memory corruption in libigl
- CVE-2023-35948 Novu Open Redirect Vulnerability in Sign-In with GitHub Functionality
- CVE-2023-35947 Path traversal vulnerabilities in handling of Tar archives in Gradle
- CVE-2023-35946 Dependency cache path traversal in Gradle
- CVE-2023-35945 Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec
- CVE-2023-35944 Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
- CVE-2023-35943 Envoy vulnerable to CORS filter segfault when origin header is removed
- CVE-2023-35942 Envoy's gRPC access log crash caused by the listener draining
- CVE-2023-35941 Envoy vulnerable to OAuth2 credentials exploit with permanent validity
- CVE-2023-35940 GLPI vulnerable to unauthenticated access to Dashboard data
- CVE-2023-35939 GLPI vulnerable to unauthorized access to Dashboard data
- CVE-2023-35938 User access not updated with privilege change in Tuleap
- CVE-2023-35937 Metersphere missing permission check
- CVE-2023-35936 Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input
- CVE-2023-35934 yt-dlp File Downloader cookie leak
- CVE-2023-35933 OpenFGA denial of service die to circular relationship
- CVE-2023-35932 jcvi vulnerable to Configuration Injection due to unsanitized user input
- CVE-2023-35931 Shescape potential environment variable exposure on Windows with CMD
- CVE-2023-35930 LookupResources may return partial results in spicedb
- CVE-2023-3593 Server crash via a specially crafted markdown input
- CVE-2023-35929 Tuleap Cross-site Scripting vulnerability in the card field of the agile dashboard apps
- CVE-2023-35928 Nextcloud user scoped external storage can be used to gather credentials of other users
- CVE-2023-35927 Nextcloud system addressbooks can be modified by malicious trusted server
- CVE-2023-35926 Insecure sandbox in Backstage Scaffolder plugin
- CVE-2023-35925 FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
- CVE-2023-35924 GLPI vulnerable to SQL injection via inventory agent request
- CVE-2023-35921 Denial of service in SIMATIC MV540 H
- CVE-2023-35920 Denial of service in SIMATIC MV540 H
- CVE-2023-3592 Denial of service in Mosquitto
- CVE-2023-35918 WordPress WooCommerce Bulk Stock Management Plugin <= 2.2.33 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35917 WordPress WooCommerce PayPal Payments Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35916 WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-35915 WordPress WooCommerce Payments Plugin <= 5.9.0 is vulnerable to SQL Injection
- CVE-2023-35914 WordPress WooCommerce Subscriptions Plugin <= 5.1.2 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-35913 WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35912 WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35911 WordPress Contact Form Generator Plugin <= 2.6.0 is vulnerable to SQL Injection
- CVE-2023-35910 WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection
- CVE-2023-3591 Lack of previous password reset tokens on new token creation
- CVE-2023-35909 WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Denial of Service Attack
- CVE-2023-35908 Apache Airflow: Access to DAGs without relevant permission