Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 292 of 430.
- CVE-2023-34477 Extension - braincert.com - SQLi in Virtual Classroom component for Joomla <= 1.6.0
- CVE-2023-34476 Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0
- CVE-2023-34475 Use after free in ImageMagick
- CVE-2023-34474 Memory corruption in ImageMagick
- CVE-2023-34473 Usage of Hard-coded Credentials
- CVE-2023-34472 Other in MegaRAC SPx
- CVE-2023-34471 Missing Cryptographic Step
- CVE-2023-34470 Improper access control
- CVE-2023-3447 Active Directory Integration / LDAP Integration <= 4.1.5 - Authenticated (Subscriber+) LDAP Injection
- CVE-2023-34469 Cold Rest Vulnerabiltiy
- CVE-2023-34468 Apache NiFi: Potential Code Injection with Database Services using H2
- CVE-2023-34467 XWiki Platform may retrieve email addresses of all users
- CVE-2023-34466 XWiki Platform's tags on non-viewable pages can be revealed to users
- CVE-2023-34465 XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
- CVE-2023-34464 XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
- CVE-2023-34463 Unauthorized users can delete applications in DataEase
- CVE-2023-34462 netty-handler SniHandler 16MB allocation
- CVE-2023-34461 Cross-site Scripting (XSS) Availability in PyBB
- CVE-2023-34460 Tauri vulnerable to Regression on Filesystem Scope Checks for Dotfiles
- CVE-2023-3446 Excessive time spent checking DH keys and parameters
- CVE-2023-34459 OpenZeppelin Contracts's MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
- CVE-2023-34458 mx-chain-go's relayed transactions always increment nonce
- CVE-2023-34457 MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
- CVE-2023-34455 snappy-java's unchecked chunk length leads to DoS
- CVE-2023-34454 snappy-java's Integer Overflow vulnerability in compress leads to DoS
- CVE-2023-34453 snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
- CVE-2023-34452 Grav vulnerable to Self Cross Site Scripting in /forgot_password
- CVE-2023-34451 CometBFT may duplicate transactions in the mempool's data structures
- CVE-2023-34450 CometBFT PeerState JSON serialization deadlock
- CVE-2023-3445 Cross-site Scripting (XSS) - Stored in spinacms/spina
- CVE-2023-34449 ink! vulnerable to incorrect decoding of storage value when using `DelegateCall`
- CVE-2023-34448 Grav Server-side Template Injection (SSTI) via Twig Default Filters
- CVE-2023-34447 iTop XSS vulnerability on pages/UI.php
- CVE-2023-34446 iTop XSS vulnerability on pages/preferences.php
- CVE-2023-34445 Cross-site Scripting vulnerability on pages/ajax.render.php in Combodo iTop
- CVE-2023-34444 Cross-site Scripting vulnerability on pages/ajax.searchform.php in Combodo iTop
- CVE-2023-34443 Cross-site Scripting vulnerability in the run_query.php page in Combodo iTop
- CVE-2023-34442 Apache Camel JIRA: Temporary file information disclosure in Camel-Jira
- CVE-2023-34441 Baker Hughes Bently Nevada 3500 System Cleartext Transmission of Sensitive Information
- CVE-2023-34440 Privilege escalation in Intel(R) Processors
- CVE-2023-3444 Incorrect Authorization in GitLab
- CVE-2023-34439 Cross-site scripting in Pleasanter
- CVE-2023-34438 Race condition in Intel(R) NUC BIOS firmware
- CVE-2023-34437 Baker Hughes Bently Nevada 3500 System Incorrect Permission Assignment for Critical Resource
- CVE-2023-34436 Memory corruption in GTKWave
- CVE-2023-34435 Security feature bypass in WBR-6013
- CVE-2023-34434 Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param
- CVE-2023-34433 PiiGAB M-Bus Use of Password Hash With Insufficient Computational Effort
- CVE-2023-34432 Heap-buffer-overflow in src/formats_i.c
- CVE-2023-34431 Privilege escalation in Intel(R) Server Board BIOS firmware
- CVE-2023-34430 Privilege escalation in Intel Battery Life Diagnostic Tool software
- CVE-2023-3443 Incorrect Authorization in GitLab
- CVE-2023-34429 Weintek Weincloud Improper Handling of Structural Elements
- CVE-2023-34427 Security feature bypass in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA
- CVE-2023-34426 Memory corruption in YF325
- CVE-2023-34425 Memory corruption in iOS and iPadOS
- CVE-2023-34424 Denial of service in Intel(R) CSME
- CVE-2023-34423 Cross-site scripting in Survey Maker
- CVE-2023-34422 Path traversal in Lenovo XClarity Administrator
- CVE-2023-34421 Other in Lenovo XClarity Administrator
- CVE-2023-34420 Command injection in Lenovo XClarity Administrator
- CVE-2023-3442 Missing Authorization in Jenkins plug-in for ServiceNow DevOps
- CVE-2023-34419 Memory corruption in Lenovo Notebook
- CVE-2023-34418 SQL injection in Lenovo XClarity Administrator
- CVE-2023-34417 Memory corruption in Firefox
- CVE-2023-34416 Memory corruption in Firefox
- CVE-2023-34415 Security feature bypass in Firefox
- CVE-2023-34414 Security feature bypass in Firefox
- CVE-2023-34412 Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250
- CVE-2023-34411 xml-rs vulnerable to denial of service via invalid token in XML document
- CVE-2023-34410 Security feature bypass in debian:debian linux
- CVE-2023-3441 Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- CVE-2023-34409 Path traversal in percona:monitoring and management
- CVE-2023-34408 Cross-site scripting in dokuwiki:dokuwiki
- CVE-2023-34407 Path traversal in harbingergroup:office player
- CVE-2023-34406 Integer overflow in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34404 Command injection in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34403 Race condition in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34402 Memory corruption in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34401 Memory corruption in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34400 Null dereference in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-3440 File and Directory Permission Vulnerability in JP1/Performance Management
- CVE-2023-34399 Integer overflow in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34398 Null dereference in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34397 Denial of service in mercedes-benz:headunit ntg6 mercedes-benz user experience
- CVE-2023-34396 Apache Struts: DoS via OOM owing to no sanity limit on normal form fields in multipart forms
- CVE-2023-34395 Apache Airflow ODBC Provider: Remote code execution vulnerability
- CVE-2023-34394 Keysight N6845A Relative Path Traversal
- CVE-2023-34392 Missing Authentication for Critical Function
- CVE-2023-34391 Insecure Inherited Permissions
- CVE-2023-34390 Improper input validation could lead to denial of service
- CVE-2023-3439 Use after free in Linux Kernel (mctp)
- CVE-2023-34389 Allocation of resources without limits could lead to denial of service
- CVE-2023-34388 Improper authentication could lead to session hijacking
- CVE-2023-34387 WordPress Constant Contact Forms plugin <= 2.0.3 - Broken Access Control vulnerability
- CVE-2023-34386 WordPress WPC Smart Wishlist for WooCommerce Plugin <= 4.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-34385 WordPress Export Import Menus Plugin <= 1.8.0 is vulnerable to Arbitrary File Upload
- CVE-2023-34384 WordPress Kebo Twitter Feed Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-34383 WordPress WP Project Manager Plugin <= 2.6.0 is vulnerable to SQL Injection
- CVE-2023-34382 WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection