Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 291 of 430.
- CVE-2023-34735 SQL injection in property cloud platform management center project:property cloud platform management center
- CVE-2023-34734 Cross-site scripting in secnet:annet ac centralized management platform
- CVE-2023-34733 Denial of service in vw:discover media infotainment system
- CVE-2023-34732 Auth bypass in flytxt:neon-dx
- CVE-2023-3473 Campcodes Retro Cellphone Online Store edit_product.php sql injection
- CVE-2023-34725 Privilege escalation in jaycar:la5570 firmware
- CVE-2023-34724 Privilege escalation in jaycar:la5570 firmware
- CVE-2023-34723 Information disclosure in jaycar:la5570 firmware
- CVE-2023-3472 Use after free in KW Watcher on Windows
- CVE-2023-3471 Memory corruption in KW Watcher
- CVE-2023-3470 BIG-IP FIPS HSM password vulnerability CVE-2023-3470
- CVE-2023-3469 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2023-34673 Information disclosure in elenos:etg150 firmware
- CVE-2023-34672 Privilege escalation in elenos:etg150 firmware
- CVE-2023-34671 Privilege escalation in elenos:etg150 fm firmware
- CVE-2023-3467 Privilege escalation in NetScaler ADC
- CVE-2023-34669 Denial of service in totolink:cp300\+ firmware
- CVE-2023-34666 Cross-site scripting in phpgurukul:cyber cafe management system
- CVE-2023-34660 jeecg-boot unrestricted file upload vulnerability
- CVE-2023-3466 Reflected Cross-Site Scripting (XSS)
- CVE-2023-34659 jeecg-boot SQL injection vulnerability
- CVE-2023-34658 Other in telegram:telegram
- CVE-2023-34657 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-34656 Auth bypass in video management system project:video management system
- CVE-2023-34654 Cross-site scripting in taogogo:taocms
- CVE-2023-34652 Cross-site scripting in phpgurukul:hostel management system
- CVE-2023-34651 Cross-site scripting in hospital management system project:hospital management system
- CVE-2023-34650 Cross-site scripting in small crm project:small crm
- CVE-2023-3465 SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting
- CVE-2023-34648 Cross-site scripting in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel
- CVE-2023-34647 Cross-site scripting in phpgurukul:hostel management system
- CVE-2023-34645 Path traversal in jflyfox:jfinal cms
- CVE-2023-34644 Code injection in ruijie:re-eg1000m firmware
- CVE-2023-34642 Security feature bypass in kioware:kioware
- CVE-2023-34641 Security feature bypass in kioware:kioware
- CVE-2023-3464 SimplePHPscripts Classified Ads Script URL Parameter preview.php cross site scripting
- CVE-2023-34637 Cross-site scripting in isarnet:isarflow
- CVE-2023-34635 SQL injection in wifi-soft:unibox administration
- CVE-2023-34634 Deserialization in getgreenshot:greenshot
- CVE-2023-3463 GE Digital CIMPLICITY Heap-based Buffer Overflow
- CVE-2023-34626 SQL injection in piwigo:piwigo
- CVE-2023-34625 Auth bypass in showmojo:mojobox firmware
- CVE-2023-34624 htmlcleaner vulnerable to stack exhaustion
- CVE-2023-34623 Memory corruption in jtidy project:jtidy
- CVE-2023-34620 hjson stack exhaustion vulnerability
- CVE-2023-3462 Vault's LDAP Auth Method Allows for User Enumeration
- CVE-2023-34617 genson vulnerable to stack exhaustion
- CVE-2023-34616 pbjson vulnerable to stack exhaustion
- CVE-2023-34615 JSONUtil vulnerable to stack exhaustion
- CVE-2023-34614 jsonij vulnerable to stack exhaustion
- CVE-2023-34613 sojo vulnerable to stack exhaustion
- CVE-2023-34612 ph-json vulnerable to stack exhaustion
- CVE-2023-34611 Memory corruption in mjson project:mjson
- CVE-2023-34610 json-io vulnerable to stack exhaustion
- CVE-2023-34609 Memory corruption in flexjson project:flexjson
- CVE-2023-34603 JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
- CVE-2023-34602 JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode
- CVE-2023-34601 SQL injection in jeesite:jeesite
- CVE-2023-34600 SQL injection in adiscon:loganalyzer
- CVE-2023-3460 Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation
- CVE-2023-34599 Cross-site scripting in gibbonedu:gibbon
- CVE-2023-34598 Path traversal in gibbonedu:gibbon
- CVE-2023-34597 Denial of service in fibaro:fgms-001 firmware
- CVE-2023-34596 Denial of service in aeotech:zw130-a firmware
- CVE-2023-3459 Missing authorization in Export and Import Users and Customers
- CVE-2023-34581 SQL injection in oretnom23:service provider management system
- CVE-2023-3458 SourceCodester Shopping Website forgot-password.php sql injection
- CVE-2023-34577 SQL injection in planned popup project:planned popup
- CVE-2023-34576 SQL injection in store-opart:op\'art product faq
- CVE-2023-34575 SQL injection in store-opart:op\'art save cart
- CVE-2023-34571 Memory corruption in tenda:ac10 firmware
- CVE-2023-34570 Memory corruption in tenda:ac10 firmware
- CVE-2023-3457 SourceCodester Shopping Website index.php sql injection
- CVE-2023-34569 Memory corruption in tenda:ac10 firmware
- CVE-2023-34568 Memory corruption in tenda:ac10 firmware
- CVE-2023-34567 Memory corruption in tenda:ac10 firmware
- CVE-2023-34566 Memory corruption in tenda:ac10 firmware
- CVE-2023-34565 Cross-site scripting in netbox:netbox
- CVE-2023-34563 Memory corruption in netgear:r6250 firmware
- CVE-2023-34561 Memory corruption in robtopgames:geometry dash
- CVE-2023-3456 Information disclosure in EMUI
- CVE-2023-34553 Auth bypass in wafucn:wafu keyless smart lock firmware
- CVE-2023-34552 Memory corruption in ezviz:cs-c6n-a0-1c2wfr-mul firmware
- CVE-2023-34551 Memory corruption in ezviz:cs-c6n-a0-1c2wfr-mul firmware
- CVE-2023-3455 Other in EMUI
- CVE-2023-34548 SQL injection in simple customer relationship management project:simple customer relationship management
- CVE-2023-34545 SQL injection in cskaza:cszcms
- CVE-2023-34541 Langchain vulnerable to arbitrary code execution
- CVE-2023-34540 Langchain OS Command Injection vulnerability
- CVE-2023-3454 Command injection in Fabric OS
- CVE-2023-34537 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2023-3453 ETIC Telecom Insecure Default Initialization of Resource
- CVE-2023-3452 Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
- CVE-2023-3450 Ruijie RG-BCR860 Network Diagnostic Page os command injection
- CVE-2023-34494 Use after free in emqx:nanomq
- CVE-2023-3449 IBOS OA Interview Management Export export&interviews=x actionExport sql injection
- CVE-2023-34488 Memory corruption in emqx:nanomq
- CVE-2023-34487 SQL injection in online hotel management system project:online hotel management system
- CVE-2023-34486 Cross-site scripting in online hotel management system project:online hotel management system
- CVE-2023-34478 Path Traversal in Apache Shiro