Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 299 of 430.
- CVE-2023-33747 Path traversal in mgt-commerce:cloudpanel
- CVE-2023-33745 Privilege escalation in teleadapt:roomcast ta-2400 firmware
- CVE-2023-33744 Hardcoded credentials in teleadapt:roomcast ta-2400 firmware
- CVE-2023-33743 Misconfiguration in teleadapt:roomcast ta-2400 firmware
- CVE-2023-33742 Information disclosure in teleadapt:roomcast ta-2400 firmware
- CVE-2023-33741 Information disclosure in macro-video:v380 pro
- CVE-2023-33740 Information disclosure in luowice:luowice
- CVE-2023-3374 Privilege Escalation in Bookreen
- CVE-2023-33736 Dcat-Admin vulnerable to Stored Cross-site Scripting
- CVE-2023-33735 Command injection in dlink:dir-846 firmware
- CVE-2023-33734 SQL injection in bluecms project:bluecms
- CVE-2023-33733 Reportlab vulnerable to remote code execution
- CVE-2023-33732 Cross-site scripting in escanav:escan management console
- CVE-2023-33731 Cross-site scripting in escanav:escan management console
- CVE-2023-33730 Information disclosure in escanav:escan management console
- CVE-2023-3373 Weak cryptography in GOT SIMPLE Series GS21 model
- CVE-2023-33725 Broadleaf vulnerable to Cross-site Scripting
- CVE-2023-33722 Command injection in edimax:br-6288acl firmware
- CVE-2023-33720 Denial of service in mp4v2 project:mp4v2
- CVE-2023-3372 Lana Shortcodes < 1.2.0 - Contributor+ Stored XSS
- CVE-2023-33719 Denial of service in mp4v2:mp4v2
- CVE-2023-33718 Denial of service in mp4v2 project:mp4v2
- CVE-2023-33717 Denial of service in mp4v2 project:mp4v2
- CVE-2023-33716 Denial of service in mp4v2:mp4v2
- CVE-2023-3371 EmbedPress <= 3.7.3 - Sensitive Information Exposure
- CVE-2023-33706 Missing authorization in sysaid:sysaid
- CVE-2023-33695 Insecure Temporary File in HuTool
- CVE-2023-33693 Memory corruption in tsingsee:easyplayerpro
- CVE-2023-33690 Path traversal in sonicjs:sonicjs
- CVE-2023-3369 About Me 3000 widget <= 2.2.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-33684 Auth bypass in dbbroadcast:sft dab 600\/c bios
- CVE-2023-3368 Chamilo LMS Unauthenticated Command Injection
- CVE-2023-33677 SQL injection in oretnom23:lost and found information system
- CVE-2023-33676 SQL injection in oretnom23:lost and found information system
- CVE-2023-33675 Memory corruption in tenda:ac8 firmware
- CVE-2023-33673 Memory corruption in tenda:ac8 firmware
- CVE-2023-33672 Memory corruption in tenda:ac8 firmware
- CVE-2023-33671 Memory corruption in tenda:ac8 firmware
- CVE-2023-33670 Memory corruption in tenda:ac8 firmware
- CVE-2023-33669 Memory corruption in tenda:ac8 firmware
- CVE-2023-33668 Security feature bypass in digiexam:digiexam
- CVE-2023-33666 SQL injection in ai-dev:aioptimizedcombinations
- CVE-2023-33665 SQL injection in ai-dev:ai-table
- CVE-2023-33664 SQL injection in ai-dev:declinaisons a la volee
- CVE-2023-33663 SQL injection in ai-dev:aicustomfee
- CVE-2023-33661 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-33660 Memory corruption in emqx:nanomq
- CVE-2023-3366 MultiParcels Shipping For WooCommerce < 1.15.2 - Arbitrary Shipment Deletion via CSRF
- CVE-2023-33659 Memory corruption in emqx:nanomq
- CVE-2023-33658 Memory corruption in emqx:nanomq
- CVE-2023-33657 Use after free in emqx:nanomq
- CVE-2023-33656 Denial of service in emqx:nanomq
- CVE-2023-33653 Code injection in sitecore:experience platform
- CVE-2023-33652 Code injection in sitecore:experience platform
- CVE-2023-33651 Missing authorization in sitecore:experience commerce
- CVE-2023-3365 MultiParcels Shipping For WooCommerce < 1.14.14 - Subscriber+ Arbitrary Shipment Deletion
- CVE-2023-33643 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33642 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33641 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33640 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-3364 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-33639 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33638 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33637 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33636 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33635 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33634 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33633 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33632 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33631 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33630 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-3363 Insertion of Sensitive Information into Log File in GitLab
- CVE-2023-33629 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33628 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33627 Memory corruption in h3c:magic r300-2100m firmware
- CVE-2023-33626 Memory corruption in dlink:dir-600 firmware
- CVE-2023-33625 Command injection in dlink:dir-600 firmware
- CVE-2023-33621 Information disclosure in gl-inet:gl-ar750s firmware
- CVE-2023-33620 Weak cryptography in gl-inet:gl-ar750s firmware
- CVE-2023-3362 Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2023-33617 Command injection in eparks:fiberlink 210 firmware
- CVE-2023-33613 Memory corruption in axtls project:axtls
- CVE-2023-3361 S3 credentials included when exporting elyra notebook
- CVE-2023-33604 Path traversal in imperial cms project:imperial cms
- CVE-2023-33601 File upload in phpok:phpok
- CVE-2023-3360 Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection
- CVE-2023-33599 Cross-site scripting in easyimages2.0 project:easyimages2.0
- CVE-2023-33595 Use after free in python:python
- CVE-2023-33592 SQL injection in oretnom23:lost and found information system
- CVE-2023-33591 Cross-site scripting in user registration \& login and user management system project:user registration \& login and user management system
- CVE-2023-3359 Null dereference in Kernel
- CVE-2023-33584 SQL injection in enrollment system project:enrollment system
- CVE-2023-33580 Cross-site scripting in phpgurukul:student study center management system
- CVE-2023-3358 Null dereference in Kernel
- CVE-2023-33570 Code injection in webkul:bagisto
- CVE-2023-3357 Null dereference in Kernel
- CVE-2023-33569 File upload in faculty evaluation system project:faculty evaluation system
- CVE-2023-33568 Dolibarr vulnerable to unauthenticated database access
- CVE-2023-33564 Cross-site scripting in phpjabbers:time slots booking calendar
- CVE-2023-33563 Auth bypass in phpjabbers:time slots booking calendar