Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 302 of 430.
- CVE-2023-33240 Misconfiguration in foxit:pdf editor
- CVE-2023-3324 Insecure deserialization in zenon internal DLLs
- CVE-2023-33239 Second Order Command-injection Vulnerability in the Key-generation Function
- CVE-2023-33238 Command-injection Vulnerability in Certificate Management
- CVE-2023-33237 Authentication Bypass Without Administrator Privilege
- CVE-2023-33236 MXsecurity Hardcoded Credential Vulnerability
- CVE-2023-33235 MXsecurity Command Injection Vulnerability
- CVE-2023-33234 Apache Airflow CNCF Kubernetes Provider: KubernetesPodOperator RCE via connection configuration
- CVE-2023-33231 XSS in SolarWinds Database Performance Analyzer 2023.2
- CVE-2023-3323 Code Execution through overwriting project file on zenon engineering studio system
- CVE-2023-33229 SolarWinds Platform Incorrect Input Neutralization Vulnerability
- CVE-2023-33228 SolarWinds Network Configuration Manager Sensitive Information Disclosure Vulnerability
- CVE-2023-33227 Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-33226 Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-33225 SolarWinds Platform Deserialization of Untrusted Data Vulnerability
- CVE-2023-33224 SolarWinds Platform Incorrect Behavior Order Vulnerability
- CVE-2023-33222 Stack buffer overflow when reading DESFire card
- CVE-2023-33221 Heap Buffer Overflow when reading DESFire card
- CVE-2023-33220 Stack Buffer Overflow when checking some attributes during retrofit
- CVE-2023-3322 Code Execution through overwriting service executable in utilities directory
- CVE-2023-33219 Stack Buffer Overflow when checking retrofit package
- CVE-2023-33218 Stack Buffer Overflow in a binary run at upgrade startup
- CVE-2023-33217 Missing integrity check on upgrade package
- CVE-2023-33216 WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.2.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33215 WordPress Taggbox plugin <= 3.3 - Broken Access Control vulnerability
- CVE-2023-33214 WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33213 WordPress wpView Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33212 WordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33211 WordPress WP-Piwik Plugin <= 1.0.27 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33210 WordPress nuajik CDN Plugin <= 0.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3321 Code Execution through Writable Mosquitto Configuration File
- CVE-2023-33209 WordPress SEO Change Monitor Plugin <= 1.2 is vulnerable to SQL Injection
- CVE-2023-33208 WordPress Cookie Monster Plugin <= 1.51 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33207 WordPress Stop Referrer Spam Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33206 Security feature bypass in dieboldnixdorf:vynamic security suite
- CVE-2023-33204 Integer overflow in debian:debian linux
- CVE-2023-33203 Use after free in linux:linux kernel
- CVE-2023-33202 Bouncy Castle Denial of Service (DoS)
- CVE-2023-33201 Bouncy Castle For Java LDAP injection vulnerability
- CVE-2023-33200 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
- CVE-2023-3320 Cross-site request forgery in WP Sticky Social
- CVE-2023-33199 malformed proposed intoto v0.0.2 entries can cause a panic in Rekor
- CVE-2023-33198 Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
- CVE-2023-33197 Craft CMS stored XSS in indexedVolumes
- CVE-2023-33196 Craft CMS stored XSS in review volume
- CVE-2023-33195 Craft CMS XSS in RSS widget feed
- CVE-2023-33194 CraftCMS stored XSS in Quick Post widget error message
- CVE-2023-33193 Emby Server Proxy Header Spoofing Vulnerability
- CVE-2023-33192 Improper handling of NTS cookie length that could crash the ntpd-rs server
- CVE-2023-33191 kyverno seccomp control can be circumvented
- CVE-2023-33190 Improperly configured permissions in Sealos
- CVE-2023-3319 XSS in iDisplays PlatPlay DS
- CVE-2023-33189 Incorrect Authorization with specially crafted requests
- CVE-2023-33188 Uncontrolled data used in content resolution
- CVE-2023-33187 highlight vulnerable to cleartext transmission of sensitive information
- CVE-2023-33186 Cross-site scripting vulnerability in Zulip Server development branch via topic tooltip
- CVE-2023-33185 Incorrect signature verification in django-ses
- CVE-2023-33184 Blind SSRF in the Nextcloud Mail app on avatar endpoint
- CVE-2023-33183 Error in calendar when booking an appointment reveals the full path of the website
- CVE-2023-33182 Nextcloud Contacts photos only sanitized if mime type is all lower case
- CVE-2023-33181 Sensitive Information Disclosure abusing Stack Trace in Xibo CMS
- CVE-2023-33180 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map
- CVE-2023-3318 SourceCodester Resort Management System cross site scripting
- CVE-2023-33179 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter
- CVE-2023-33178 Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter
- CVE-2023-33177 Xibo CMS vulnerable to Remote Code Execution through Zip Slip
- CVE-2023-33176 Blind SSRF When Uploading Presentation in BigBlueButton
- CVE-2023-33175 ToUI allows user-specific variables to be shared between users
- CVE-2023-33174 Windows Cryptographic Information Disclosure Vulnerability
- CVE-2023-33173 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33172 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33171 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- CVE-2023-33170 ASP.NET and Visual Studio Security Feature Bypass Vulnerability
- CVE-2023-3317 Use after free in Kernel
- CVE-2023-33169 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33168 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33167 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33166 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33165 Microsoft SharePoint Server Security Feature Bypass Vulnerability
- CVE-2023-33164 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-33163 Windows Network Load Balancing Remote Code Execution Vulnerability
- CVE-2023-33162 Microsoft Excel Information Disclosure Vulnerability
- CVE-2023-33161 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-33160 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2023-3316 Null dereference in libtiff
- CVE-2023-33159 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2023-33158 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-33157 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2023-33156 Microsoft Defender Elevation of Privilege Vulnerability
- CVE-2023-33155 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-33154 Windows Partition Management Driver Elevation of Privilege Vulnerability
- CVE-2023-33153 Microsoft Outlook Remote Code Execution Vulnerability
- CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability
- CVE-2023-33151 Microsoft Outlook Spoofing Vulnerability
- CVE-2023-33150 Microsoft Office Security Feature Bypass Vulnerability
- CVE-2023-3315 Jenkins Team Concert Plugin does not perform permission checks in methods implementing form validation
- CVE-2023-33149 Microsoft Office Graphics Remote Code Execution Vulnerability
- CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability
- CVE-2023-33146 Microsoft Office Remote Code Execution Vulnerability
- CVE-2023-33145 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability