Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 284 of 430.
- CVE-2023-35907 IBM Aspera Faspex information disclosure
- CVE-2023-35906 IBM Aspera Faspex security bypass
- CVE-2023-35905 IBM FileNet Content Manager cross-site scripting
- CVE-2023-35901 IBM Robotic Process Automation security bypass
- CVE-2023-35900 IBM Robotic Process Automation information disclosure
- CVE-2023-3590 Deleted attachments in Boards remain accessible
- CVE-2023-35899 IBM Cloud Pak for Automation CSV injection
- CVE-2023-35898 IBM InfoSphere Information Server information disclosure
- CVE-2023-35897 IBM Spectrum Protect code execution
- CVE-2023-35896 IBM Content Navigator server-side request forgery
- CVE-2023-35895 IBM Informix JDBC code execution
- CVE-2023-35894 IBM Control Center HOST header injection
- CVE-2023-35893 IBM Security Guardium command execution
- CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services XML external entity injection
- CVE-2023-35890 IBM WebSphere Application Server information disclosure
- CVE-2023-3589 Cross-site request forgery in Teamwork Cloud - Business Edition
- CVE-2023-35888 IBM Security Verify Governance information disclosure
- CVE-2023-35887 Apache MINA SSHD: Information disclosure bugs with RootedFilesystem
- CVE-2023-35885 Auth bypass in mgt-commerce:cloudpanel
- CVE-2023-35884 WordPress EventPrime Plugin <= 3.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35883 WordPress Core Web Vitals & PageSpeed Booster Plugin <= 1.0.12 is vulnerable to Open Redirection
- CVE-2023-35882 WordPress Super Socializer Plugin <= 7.13.52 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35881 WordPress WooCommerce One Page Checkout plugin <= 2.3.0 - Local File Inclusion vulnerability
- CVE-2023-35880 WordPress WooCommerce Brands Plugin <= 1.6.49 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-3588 Cross-site scripting in Teamwork Cloud - Business Edition
- CVE-2023-35879 WordPress WooCommerce Product Vendors Plugin <= 2.1.78 is vulnerable to SQL Injection
- CVE-2023-35878 WordPress Extra User Details Plugin <= 0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35877 WordPress Extra User Details Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35876 WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-35875 Missing authorization in Gutenverse
- CVE-2023-35874 Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2023-35873 Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)
- CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)
- CVE-2023-35871 Memory Corruption vulnerability in SAP Web Dispatcher
- CVE-2023-35870 Improper Access Control in SAP S/4HANA (Manage Journal Entry Template)
- CVE-2023-3587 Inconsistent state in UI after boards permission change by system admin
- CVE-2023-35867 Denial of service in BIS Video Engine
- CVE-2023-35866 Security feature bypass in keepassxc:keepassxc
- CVE-2023-35863 Race condition in madefornet:http debugger
- CVE-2023-35862 Memory corruption in libcoap:libcoap
- CVE-2023-35861 Command injection in supermicro:h12dgo-6 firmware
- CVE-2023-35860 Path traversal in moderncampus:omni cms
- CVE-2023-3586 Disabling publicly-shared boards does not disable existing publicly available board links
- CVE-2023-35859 Cross-site scripting in moderncampus:omni cms
- CVE-2023-35858 Code injection in moderncampus:omni cms
- CVE-2023-35857 Auth bypass in siren:investigate
- CVE-2023-35856 Memory corruption in nintendo:mario kart wii
- CVE-2023-35855 Memory corruption in valvesoftware:counter-strike
- CVE-2023-35854 Auth bypass in zohocorp:manageengine adselfservice plus
- CVE-2023-35853 Code injection in oisf:suricata
- CVE-2023-35852 Path traversal in oisf:suricata
- CVE-2023-35851 SUNNET WMPro - SQL Injection
- CVE-2023-35850 SUNNET WMPro - Command Injection
- CVE-2023-3585 channel DoS by sharing a boards link
- CVE-2023-35849 Memory corruption in virtualsquare:picotcp
- CVE-2023-35848 Memory corruption in virtualsquare:picotcp
- CVE-2023-35847 Other in virtualsquare:picotcp
- CVE-2023-35846 Memory corruption in virtualsquare:picotcp
- CVE-2023-35845 Misconfiguration in anaconda:anaconda3
- CVE-2023-35844 Path traversal in lightdash:lightdash
- CVE-2023-35843 Path traversal in nocodb:nocodb
- CVE-2023-35841 WinFlash Driver Permissions Issue
- CVE-2023-35840 elFinder vulnerable to path traversal in LocalVolumeDriver connector
- CVE-2023-3584 Member can create team with team override scheme
- CVE-2023-35839 Solon vulnerable to deserialization of untrusted data
- CVE-2023-35838 Security feature bypass in wireguard:wireguard
- CVE-2023-35837 Hardcoded credentials in solax:pocket wifi 3 firmware
- CVE-2023-35836 Information disclosure in solax:pocket wifi 3 firmware
- CVE-2023-35835 Misconfiguration in solax:pocket wifi 3 firmware
- CVE-2023-35833 Information disclosure in ysoft:safeq server
- CVE-2023-35830 Auth bypass in stw-mobile-machines:tcg-4 firmware
- CVE-2023-35829 Use after free in linux:linux kernel
- CVE-2023-35828 Use after free in linux:linux kernel
- CVE-2023-35827 Use after free in linux:linux kernel
- CVE-2023-35826 Use after free in linux:linux kernel
- CVE-2023-35824 Use after free in debian:debian linux
- CVE-2023-35823 Use after free in debian:debian linux
- CVE-2023-3582 Lack of channel membership check when linking a board to a channel
- CVE-2023-35818 Security feature bypass in espressif:esp-eye firmware
- CVE-2023-35817 Server-side request forgery in DevExpress
- CVE-2023-35816 Deserialization in DevExpress
- CVE-2023-35815 Deserialization in DevExpress
- CVE-2023-35814 Deserialization in DevExpress
- CVE-2023-35813 Code injection in sitecore:experience commerce
- CVE-2023-35812 An issue was discovered in the Amazon Linux packages of OpenSSH 7.4 for Amazon Linux 1 and 2, because of an incomplete fix for CVE-2019-6111
- CVE-2023-35811 SQL injection in sugarcrm:sugarcrm
- CVE-2023-35810 Deserialization in sugarcrm:sugarcrm
- CVE-2023-3581 WebSockets accept connections from HTTPS origin
- CVE-2023-35809 Code injection in sugarcrm:sugarcrm
- CVE-2023-35808 File upload in sugarcrm:sugarcrm
- CVE-2023-35803 Memory corruption in extremenetworks:iq engine
- CVE-2023-35802 Memory corruption in extremenetworks:iq engine
- CVE-2023-35801 Path traversal in safe:fme server
- CVE-2023-35800 Misconfiguration in stormshield:endpoint security
- CVE-2023-3580 Improper Handling of Additional Special Element in squidex/squidex
- CVE-2023-35799 Privilege escalation in stormshield:endpoint security
- CVE-2023-35798 Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability
- CVE-2023-35797 Apache Airflow Hive Provider Beeline RCE with Principal
- CVE-2023-35796 Cross-site scripting in SINEMA Server V14
- CVE-2023-35794 Auth bypass in cassianetworks:access controller