Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 290 of 430.
- CVE-2023-3497 Memory corruption in Chrome
- CVE-2023-34969 Denial of service in debian:debian linux
- CVE-2023-34968 Samba: spotlight server-side share path disclosure
- CVE-2023-34967 Samba: type confusion in mdssvc rpc service for spotlight
- CVE-2023-34966 Samba: infinite loop in mdssvc rpc service for spotlight
- CVE-2023-34965 Missing authorization in sspanel-uim project:sspanel-uim
- CVE-2023-34962 Missing authorization in chamilo:chamilo lms
- CVE-2023-34961 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-34960 Command injection in chamilo:chamilo
- CVE-2023-34959 Server-side request forgery in chamilo:chamilo lms
- CVE-2023-34958 Missing authorization in chamilo:chamilo lms
- CVE-2023-3495 Out-of-bounds Write Vulnerability in Hitachi EH-VIEW (KeypadDesigner)
- CVE-2023-34944 File upload in chamilo:chamilo lms
- CVE-2023-34942 Memory corruption in asus:rt-n10lx firmware
- CVE-2023-34941 Cross-site scripting in asus:rt-n10lx firmware
- CVE-2023-34940 Memory corruption in asus:rt-n10lx firmware
- CVE-2023-3494 bhyve privileged guest escape via fwctl
- CVE-2023-34939 Path traversal in onlyoffice:onlyoffice
- CVE-2023-34937 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34936 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34935 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34934 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34933 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34932 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34931 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34930 Memory corruption in h3c:magic b1st firmware
- CVE-2023-3493 Improper Neutralization of Formula Elements in a CSV File in fossbilling/fossbilling
- CVE-2023-34929 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34928 Memory corruption in h3c:magic b1st firmware
- CVE-2023-34927 Casdoor Cross-Site Request Forgery vulnerability
- CVE-2023-34924 Memory corruption in h3c:magic b1stw firmware
- CVE-2023-34923 Auth bypass in topdesk:topdesk
- CVE-2023-3492 WP Shopping Pages <= 1.14 - Stored XSS via CSRF
- CVE-2023-34917 Open redirect in cms project:cms
- CVE-2023-34916 Open redirect in cms project:cms
- CVE-2023-3491 Unrestricted Upload of File with Dangerous Type in fossbilling/fossbilling
- CVE-2023-3490 SQL Injection in fossbilling/fossbilling
- CVE-2023-3489 firmwaredownload command could log servers passwords in clear text
- CVE-2023-34880 Path traversal in cmseasy:cmseasy
- CVE-2023-3488 Uninitialized variable in Gecko Bootloader can leak secure stack
- CVE-2023-34878 Information disclosure in ujcms:ujcms
- CVE-2023-34873 Command injection in Mx6
- CVE-2023-34872 Denial of service in freedesktop:poppler
- CVE-2023-3487 Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access
- CVE-2023-34869 Cross-site scripting in phpjabbers:catering system
- CVE-2023-34868 Denial of service in jerryscript:jerryscript
- CVE-2023-34867 Denial of service in jerryscript:jerryscript
- CVE-2023-34865 Path traversal in ujcms:ujcms
- CVE-2023-3486 PaperCut NG Unauthenticated File Upload
- CVE-2023-34856 Cross-site scripting in dlink:di-7500g-ci firmware
- CVE-2023-34855 Cross-site scripting in ac centralized management platform project:ac centralized management platform
- CVE-2023-34854 File upload in HotelDruid
- CVE-2023-34853 Memory corruption in supermicro:h11dsi-nt firmware
- CVE-2023-34852 Misconfiguration in publiccms:publiccms
- CVE-2023-3485 Insecure Default Authorization in Temporal Server
- CVE-2023-34849 Command injection in ikuai8:ikuaios
- CVE-2023-34845 File upload in bludit:bludit
- CVE-2023-34844 Privilege escalation in play with docker project:play with docker
- CVE-2023-34843 Path traversal in traggo:traggo
- CVE-2023-34842 Code injection in dedecms:dedecms
- CVE-2023-34840 angular-ui-notification Cross-site Scripting vulnerability
- CVE-2023-3484 Incorrect Authorization in GitLab
- CVE-2023-34839 Cross-site request forgery in issabel:pbx
- CVE-2023-34838 Cross-site scripting in escanav:escan management console
- CVE-2023-34837 Cross-site scripting in escanav:escan management console
- CVE-2023-34836 Cross-site scripting in escanav:escan management console
- CVE-2023-34835 Cross-site scripting in escanav:escan management console
- CVE-2023-34834 Information disclosure in mcl-collection:mcl-net firmware
- CVE-2023-34833 File upload in thinkadmin:thinkadmin
- CVE-2023-34832 Memory corruption in tp-link:archer ax10 firmware
- CVE-2023-34831 Cross-site scripting in odysseycs:ithacalabs turnitin lti
- CVE-2023-34830 Cross-site scripting in i-doit:i-doit
- CVE-2023-34829 Information disclosure in tp-link:tapo
- CVE-2023-34824 Memory corruption in fdkaac project:fdkaac
- CVE-2023-34823 Memory corruption in fdkaac project:fdkaac
- CVE-2023-3482 Security feature bypass in Firefox
- CVE-2023-3481 XSS in Chrome Lab Critters
- CVE-2023-34800 Command injection in dlink:go-rt-ac750 firmware
- CVE-2023-34798 File upload in weaver:e-office
- CVE-2023-34797 Missing authorization in temenos:cwx
- CVE-2023-34796 Cross-site scripting in techsneeze:dmarc report
- CVE-2023-34795 Memory corruption in xlsxio project:xlsxio
- CVE-2023-3479 Cross-site Scripting (XSS) - Reflected in hestiacp/hestiacp
- CVE-2023-3478 IBOS OA Add User edit&op=member actionEdit sql injection
- CVE-2023-3477 RocketSoft Rocket LMS Contact Form store cross site scripting
- CVE-2023-34761 Auth bypass in 7-eleven:hello cup
- CVE-2023-3476 SimplePHPscripts GuestBook Script URL Parameter preview.php cross site scripting
- CVE-2023-34758 Silver vulnerable to MitM attack against implants due to a cryptography vulnerability
- CVE-2023-34756 SQL injection in bloofox:bloofoxcms
- CVE-2023-34755 SQL injection in bloofox:bloofoxcms
- CVE-2023-34754 SQL injection in bloofox:bloofoxcms
- CVE-2023-34753 SQL injection in bloofox:bloofoxcms
- CVE-2023-34752 SQL injection in bloofox:bloofoxcms
- CVE-2023-34751 SQL injection in bloofox:bloofoxcms
- CVE-2023-34750 SQL injection in bloofox:bloofoxcms
- CVE-2023-3475 SimplePHPscripts Event Script URL Parameter preview.php cross site scripting
- CVE-2023-34747 File upload in ujcms:ujcms
- CVE-2023-3474 SimplePHPscripts Simple Blog URL Parameter preview.php cross site scripting
- CVE-2023-34738 File upload in chemex:chemex
- CVE-2023-34736 File upload in guantang equipment management system project:guantang equipment management system