Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 294 of 430.
- CVE-2023-34285 NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34284 NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability
- CVE-2023-34283 NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability
- CVE-2023-34282 D-Link DIR-2150 HNAP Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability
- CVE-2023-34281 D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability
- CVE-2023-34280 D-Link DIR-2150 SetSysEmailSettings EmailTo Command Injection Remote Code Execution Vulnerability
- CVE-2023-3428 Imagemagick: heap-buffer-overflow in coders/tiff.c
- CVE-2023-34279 D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability
- CVE-2023-34278 D-Link DIR-2150 SetSysEmailSettings EmailFrom Command Injection Remote Code Execution Vulnerability
- CVE-2023-34277 D-Link DIR-2150 SetSysEmailSettings AccountName Command Injection Remote Code Execution Vulnerability
- CVE-2023-34276 D-Link DIR-2150 SetTriggerPPPoEValidate Username Command Injection Remote Code Execution Vulnerability
- CVE-2023-34275 D-Link DIR-2150 SetNTPServerSettings Command Injection Remote Code Execution Vulnerability
- CVE-2023-34274 D-Link DIR-2150 LoginPassword Incorrect Implementation of Authentication Algorithm Authentication Bypass Vulnerability
- CVE-2023-34273 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34272 Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
- CVE-2023-34271 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34270 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-3427 Cross-site request forgery in Salon Booking System – Free Version
- CVE-2023-34269 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34268 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34267 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34266 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34265 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34264 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34263 Fatek Automation FvDesigner FPJ File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
- CVE-2023-34262 Fatek Automation FvDesigner FPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34261 Information disclosure in kyocera:d-copia253mf plus firmware
- CVE-2023-34260 Path traversal in kyocera:d-copia253mf plus firmware
- CVE-2023-3426 Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
- CVE-2023-34259 Path traversal in kyocera:d-copia253mf plus firmware
- CVE-2023-34258 Information disclosure in bmc:patrol
- CVE-2023-34257 Code injection in bmc:patrol agent
- CVE-2023-34256 Memory corruption in debian:debian linux
- CVE-2023-34254 Remote inventory task command injection when using ssh command mode
- CVE-2023-34253 Grav vulnerable to Server-side Template Injection (SSTI) via Denylist Bypass
- CVE-2023-34252 Grav Server-side Template Injection via Insufficient Validation in filterFilter
- CVE-2023-34251 Grav Server Side Template Injection vulnerability
- CVE-2023-34250 Discourse vulnerable to exposure of number of topics recently created in private categories
- CVE-2023-3425 CVE-2023-3425: Out-of-Bounds memory read
- CVE-2023-34249 benjjvi/PyBB may send unsanitized request to SQL database
- CVE-2023-34247 @keystone-6/auth Open Redirect vulnerability
- CVE-2023-34246 Doorkeeper Improper Authentication vulnerability
- CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link
- CVE-2023-34244 GLPI vulnerable to reflected XSS in search pages
- CVE-2023-34243 Windows user name disclosure in TGstation
- CVE-2023-34242 Cilium vulnerable to information leakage via incorrect ReferenceGrant handling
- CVE-2023-34241 CUPS vulnerable to use-after-free in cupsdAcceptClient()
- CVE-2023-34240 Weak passwords allowed in cloudexplorer-lite
- CVE-2023-3424 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-34239 Unfiltered paths in gradio
- CVE-2023-34238 Local File Inclusion vulnerability in Gatsby
- CVE-2023-34237 Remote code execution via specially crafted script settings in SABnzbd
- CVE-2023-34236 Information Disclosure Vulnerability in Weave GitOps Terraform Controller
- CVE-2023-34235 Leaking sensitive user information still possible by filtering on private with prefix fields
- CVE-2023-34234 Governor proposal creation may be blocked by frontrunning in OpenZeppelin
- CVE-2023-34233 Snowflake Python Connector vulnerable to Command Injection
- CVE-2023-34232 Snowflake NodeJS Driver vulnerable to Command Injection
- CVE-2023-34231 Snowflake Golang Driver vulnerable to Command Injection
- CVE-2023-34230 Snowflake Connector vulnerable to Command Injection
- CVE-2023-3423 Weak Password Requirements in cloudexplorer-dev/cloudexplorer-lite
- CVE-2023-34229 Cross-site scripting in TeamCity
- CVE-2023-34228 Auth bypass in TeamCity
- CVE-2023-34227 Other in TeamCity
- CVE-2023-34226 Cross-site scripting in TeamCity
- CVE-2023-34225 Cross-site scripting in TeamCity
- CVE-2023-34224 Open redirect in TeamCity
- CVE-2023-34223 Information disclosure in TeamCity
- CVE-2023-34222 Cross-site scripting in TeamCity
- CVE-2023-34221 Cross-site scripting in TeamCity
- CVE-2023-34220 Cross-site scripting in TeamCity
- CVE-2023-3422 Use after free in Chrome
- CVE-2023-34219 Missing authorization in TeamCity
- CVE-2023-34218 Missing authorization in TeamCity
- CVE-2023-34217 Second Order Command-injection Vulnerability in the Certificate-delete Function
- CVE-2023-34216 Second Order Command-injection Vulnerability in the Key-delete Function
- CVE-2023-34215 Second Order Command-injection Vulnerability in the Certificate-generation Function
- CVE-2023-34214 Second Order Command-injection Vulnerability in the Certificate-generation Function
- CVE-2023-34213 Second Order Command-injection Vulnerability in the Key-generation Function
- CVE-2023-34212 Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components
- CVE-2023-34210 SQL Injection in EasyUse MailHunter Ultimate
- CVE-2023-3421 Use after free in Chrome
- CVE-2023-34209 Exposure of Sensitive System Information to an Unauthorized Control Sphere in EasyUse MailHunter Ultimate
- CVE-2023-34208 Path Traversal in EasyUse MailHunter Ultimate
- CVE-2023-34207 Unrestricted Upload of File with Dangerous Type in EasyUse MailHunter Ultimate
- CVE-2023-34205 Signature validation bypass in github.com/moov-io/signedxml
- CVE-2023-34204 Other in imapsync project:imapsync
- CVE-2023-34203 Other in progress:openedge
- CVE-2023-3420 Memory corruption in Chrome
- CVE-2023-34198 Security feature bypass in stormshield:stormshield network security
- CVE-2023-34197 Missing authorization in zohocorp:manageengine servicedesk plus
- CVE-2023-34196 Auth bypass in keyfactor:ejbca
- CVE-2023-34195 Code injection in insyde:insydeh2o
- CVE-2023-34194 Denial of service in tinyxml project:tinyxml
- CVE-2023-34193 File upload in zimbra:collaboration
- CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS)
- CVE-2023-3419 tagDiv Opt-In Builder <= 1.4.4 - Authenticated (Admin+) SQL Injection
- CVE-2023-34189 Apache InLong: General user can delete and update process
- CVE-2023-34188 Denial of service in cesanta:mongoose
- CVE-2023-34187 WordPress Call Now Icon Animate Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34186 WordPress Headless CMS plugin <= 2.0.3 - Broken Authentication vulnerability