Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 300 of 430.
- CVE-2023-33562 Information disclosure in phpjabbers:time slots booking calendar
- CVE-2023-33561 Other in phpjabbers:time slots booking calendar
- CVE-2023-33560 Cross-site scripting in phpjabbers:time slots booking calendar
- CVE-2023-3356 Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
- CVE-2023-33559 Path traversal in ocomon project:ocomon
- CVE-2023-33558 Information disclosure in ocomon project:ocomon
- CVE-2023-33557 SQL injection in thedaylightstudio:fuel cms
- CVE-2023-33556 Command injection in totolink:a7100ru firmware
- CVE-2023-33553 Auth bypass in planet:wdrt-1800ax firmware
- CVE-2023-33552 Memory corruption in erofs-utils project:erofs-utils
- CVE-2023-33551 Memory corruption in erofs-utils project:erofs-utils
- CVE-2023-3355 Null pointer dereference in submit_lookup_cmds() in drivers/gpu/drm/msm/msm_gem_submit.c
- CVE-2023-33548 Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to ru
- CVE-2023-33546 janino vulnerable to denial of service due to stack overflow
- CVE-2023-33544 hawtio vulnerable to Path Traversal
- CVE-2023-3354 Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service
- CVE-2023-33538 TP-Link Multiple Routers Command Injection
- CVE-2023-33537 Memory corruption in tp-link:tl-wr740n firmware
- CVE-2023-33536 Memory corruption in tp-link:tl-wr740n firmware
- CVE-2023-33534 Cross-site request forgery in sztozed:zlt s10g firmware
- CVE-2023-33533 Command injection in netgear:d6220 firmware
- CVE-2023-33532 Command injection in netgear:r6250 firmware
- CVE-2023-33530 Command injection in tenda:g103 firmware
- CVE-2023-33528 Cross-site scripting in halo:halo
- CVE-2023-33524 Path traversal in advent:tamale rms
- CVE-2023-3352 Smush – Lazy Load Images, Optimize & Compress Images <= 3.16.4 - Missing Authorization to Resmush List Deletion
- CVE-2023-33518 Information disclosure in emoncms:emoncms
- CVE-2023-33517 Path traversal in carrental project:carrental
- CVE-2023-33515 Cross-site scripting in softexpert:excellence suite
- CVE-2023-33510 Jeecg P3 Biz Chat allows remote attackers to read arbitrary files
- CVE-2023-33509 SQL injection in kramerav:via go2 firmware
- CVE-2023-33508 File upload in kramerav:via go2 firmware
- CVE-2023-33507 Path traversal in kramerav:via go2 firmware
- CVE-2023-3350 Cryptographic Issues on IBERMATICA RPS
- CVE-2023-33498 alist Incorrect Access Control vulnerability
- CVE-2023-33496 xxl-rpc deserialization vulnerability
- CVE-2023-33495 Craft CMS vulnerable to HTML injection
- CVE-2023-33493 File upload in ajaxmanager project:ajaxmanager
- CVE-2023-33492 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-3349 Information exposure on IBERMATICA RPS
- CVE-2023-33487 Command injection in totolink:x5000r firmware
- CVE-2023-33486 Command injection in totolink:x5000r firmware
- CVE-2023-33485 Memory corruption in totolink:x5000r firmware
- CVE-2023-33481 SQL injection in remoteclinic:remote clinic
- CVE-2023-33480 Privilege escalation in remoteclinic:remote clinic
- CVE-2023-3348 Directory traversal vulnerability in Cloudflare Wrangler
- CVE-2023-33479 SQL injection in remoteclinic:remote clinic
- CVE-2023-33478 SQL injection in remoteclinic:remote clinic
- CVE-2023-33477 Missing authorization in harmonicinc:nsg 9000-6g firmware
- CVE-2023-33476 Memory corruption in readymedia project:readymedia
- CVE-2023-33472 Code injection in scada-lts:scada-lts
- CVE-2023-3347 Samba: smb2 packet signing is not enforced when "server signing = required" is set
- CVE-2023-33469 Code injection in kramerav:via connect2 firmware
- CVE-2023-33468 Auth bypass in kramerav:via connect2 firmware
- CVE-2023-33466 Code injection in orthanc-server:orthanc
- CVE-2023-33461 Null dereference in ndevilla:iniparser
- CVE-2023-33460 Denial of service in debian:debian linux
- CVE-2023-3346 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series
- CVE-2023-33457 Memory corruption in sogou:c\+\+ workflow
- CVE-2023-3345 LMS by Masteriyo < 1.6.8 - Information Exposure
- CVE-2023-33443 Missing authorization in besder:videoplaytool
- CVE-2023-33440 Code injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-3344 Auto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting
- CVE-2023-33439 SQL injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-33438 Cross-site scripting in wolterskluwer:teammate\+
- CVE-2023-3343 User Registration <= 3.0.1 - Authenticated (Subscriber+) PHP Object Injection
- CVE-2023-3342 User Registration <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Upload
- CVE-2023-33413 Command injection in supermicro:b12dpe-6 firmware
- CVE-2023-33412 Command injection in supermicro:b12dpe-6 firmware
- CVE-2023-33411 Path traversal in supermicro:b12dpe-6 firmware
- CVE-2023-33410 Code injection in minical:minical
- CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
- CVE-2023-33409 Cross-site request forgery in minical:minical
- CVE-2023-33408 Cross-site scripting in minical:minical
- CVE-2023-33405 Open redirect in blogengine:blogengine.net
- CVE-2023-33404 File upload in blogengine:blogengine.net
- CVE-2023-3340 SourceCodester Online School Fees System GET Parameter ajx.php sql injection
- CVE-2023-33394 Cross-site scripting in skycaiji:skycaiji
- CVE-2023-3339 code-projects Agro-School Management System exam-delete.php sql injection
- CVE-2023-33387 Cross-site scripting in datev:eg personal-management system comfort\/comfort plus
- CVE-2023-33386 File upload in marsctf project:marsctf
- CVE-2023-33383 Memory corruption in shelly:pro 4pm firmware
- CVE-2023-33381 Command injection in mitrastar:gpt-2741gnac firmware
- CVE-2023-3338 Crash due to a null pointer dereference in the dn_nsp_send function
- CVE-2023-33379 Misconfiguration in connectedio:er2000t-vz-cat1 firmware
- CVE-2023-33378 Command injection in connectedio:connected io
- CVE-2023-33377 Command injection in connectedio:connected io
- CVE-2023-33376 Command injection in connectedio:connected io
- CVE-2023-33375 Memory corruption in connectedio:connected io
- CVE-2023-33374 Command injection in connectedio:connected io
- CVE-2023-33373 Information disclosure in connectedio:connected io
- CVE-2023-33372 Hardcoded credentials in connectedio:connected io
- CVE-2023-33371 Hardcoded credentials in assaabloy:control id idsecure
- CVE-2023-33370 Denial of service in assaabloy:control id idsecure
- CVE-2023-3337 PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication
- CVE-2023-33369 Path traversal in assaabloy:control id idsecure
- CVE-2023-33368 Information disclosure in assaabloy:control id idsecure
- CVE-2023-33367 SQL injection in assaabloy:control id idsecure
- CVE-2023-33366 SQL injection in supremainc:biostar 2
- CVE-2023-33365 Path traversal in supremainc:biostar 2