Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 285 of 430.
- CVE-2023-35793 Cross-site request forgery in cassianetworks:access controller
- CVE-2023-35792 Cross-site scripting in vound-software:intella connect
- CVE-2023-35791 Open redirect in vound-software:intella connect
- CVE-2023-35790 Integer overflow in libjxl project:libjxl
- CVE-2023-3579 HadSky User cross-site request forgery
- CVE-2023-35789 Information disclosure in rabbitmq-c project:rabbitmq-c
- CVE-2023-35788 Memory corruption in canonical:ubuntu linux
- CVE-2023-35786 XML external entity in zohocorp:manageengine admanager plus
- CVE-2023-35785 Auth bypass in zohocorp:manageengine ad360
- CVE-2023-35784 Use after free in openbsd:libressl
- CVE-2023-35783 ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting
- CVE-2023-35782 ipandlanguageredirect extension vulnerable to SQL Injection
- CVE-2023-35781 WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35780 WordPress Galleria Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-3578 DedeCMS co_do.php server-side request forgery
- CVE-2023-35779 WordPress Seed Fonts Plugin 2.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35778 WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35777 WordPress The Events Calendar plugin <= 6.1.2.2 - Broken Access Control vulnerability
- CVE-2023-35776 WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35775 WordPress WP Backup Manager Plugin <= 1.13.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35774 WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35773 WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35772 WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3577 Limited blind SSRF to localhost/intranet in interactive dialog implementation
- CVE-2023-35769 Privilege escalation in Intel(R) CIP software
- CVE-2023-35767 Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core
- CVE-2023-35765 PiiGAB M-Bus Plaintext Storage of a Password
- CVE-2023-35764 Security feature bypass in Survey Maker
- CVE-2023-35763 Iagona ScrutisWeb Use of Hard-coded Cryptographic Key
- CVE-2023-35762 OS Command Injection in INEA ME RTU
- CVE-2023-3576 Libtiff: memory leak in tiffcrop.c
- CVE-2023-35759 Cross-site scripting in progress:whatsup gold
- CVE-2023-35757 D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35756 D-Link DAP-2622 DDP Set Date-Time Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35755 D-Link DAP-2622 DDP Set Date-Time Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35754 D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35753 D-Link DAP-2622 DDP Set AG Profile UUID Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35752 D-Link DAP-2622 DDP Set AG Profile Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35751 D-Link DAP-2622 DDP Set AG Profile Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35750 D-Link DAP-2622 DDP Get SSID List WPA PSK Information Disclosure Vulnerability
- CVE-2023-3575 Quiz And Survey Master < 8.1.11 - Contributor+ Stored XSS
- CVE-2023-35749 D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35748 Memory corruption in DAP-2622
- CVE-2023-35747 D-Link DAP-2622 DDP Firmware Upgrade Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35746 D-Link DAP-2622 DDP Firmware Upgrade Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35745 D-Link DAP-2622 DDP Configuration Restore Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35744 Memory corruption in DAP-2622
- CVE-2023-35743 D-Link DAP-2622 DDP Configuration Restore Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35742 D-Link DAP-2622 DDP Configuration Restore Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35741 D-Link DAP-2622 DDP Configuration Backup Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35740 D-Link DAP-2622 DDP Configuration Backup Server Address Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-3574 Improper Authorization in pimcore/customer-data-framework
- CVE-2023-35739 Memory corruption in DAP-2622
- CVE-2023-35738 D-Link DAP-2622 DDP Configuration Backup Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35737 D-Link DAP-2622 DDP Configuration Backup Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35736 D-Link DAP-2622 DDP Change ID Password New Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35735 D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35734 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-35733 D-Link DAP-2622 DDP Change ID Password Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35732 D-Link DAP-2622 DDP Reset Factory Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35731 D-Link DAP-2622 DDP Reset Factory Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35730 D-Link DAP-2622 DDP Reset Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-3573 PHOENIX CONTACT: Command Injection in WP 6xxx Web panels
- CVE-2023-35729 D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35728 D-Link DAP-2622 DDP Reboot Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35727 D-Link DAP-2622 DDP Reboot Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35726 D-Link DAP-2622 DDP User Verification Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35725 D-Link DAP-2622 DDP User Verification Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35724 D-Link DAP-2622 Telnet CLI Use of Hardcoded Credentials Authentication Bypass Vulnerability
- CVE-2023-35723 D-Link DIR-X3260 prog.cgi SOAPAction Command Injection Remote Code Execution Vulnerability
- CVE-2023-35722 NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
- CVE-2023-35721 NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability
- CVE-2023-35720 ASUS RT-AX92U lighttpd mod_webdav.so SQL Injection Information Disclosure Vulnerability
- CVE-2023-3572 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- CVE-2023-35719 Auth bypass in ADSelfService Plus
- CVE-2023-35718 D-Link DAP-2622 DDP Change ID Password Auth Password Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35717 TP-Link Tapo C210 Password Recovery Authentication Bypass Vulnerability
- CVE-2023-35716 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-35715 Ashlar-Vellum Cobalt AR File Parsing Uninitialized Memory Remote Code Execution Vulnerability
- CVE-2023-35714 Ashlar-Vellum Cobalt IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-35713 Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability
- CVE-2023-35712 Ashlar-Vellum Cobalt XE File Parsing Uninitialized Memory Remote Code Execution Vulnerability
- CVE-2023-35711 Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-35710 Ashlar-Vellum Cobalt Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-3571 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- CVE-2023-35709 Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-35708 SQL injection in progress:moveit transfer
- CVE-2023-35704 Memory corruption in GTKWave
- CVE-2023-35703 Memory corruption in GTKWave
- CVE-2023-35702 Memory corruption in GTKWave
- CVE-2023-35701 Apache Hive: Arbitrary command execution via JDBC driver
- CVE-2023-3570 PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
- CVE-2023-35699 Information disclosure in ICR890-4
- CVE-2023-35698 Information disclosure in ICR890-4
- CVE-2023-35697 Auth bypass in ICR890-4
- CVE-2023-35696 Information disclosure in ICR890-4
- CVE-2023-35695 Information disclosure in Trend Micro Moibile Security for Enterprise
- CVE-2023-35694 Memory corruption in Android
- CVE-2023-35693 Use after free in Android
- CVE-2023-35692 Privilege escalation in Android