Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 304 of 430.
- CVE-2023-33044 Reachable Assertion in Data Modem
- CVE-2023-33043 Reachable Assertion in Modem
- CVE-2023-33042 Improper Input Validation in Modem
- CVE-2023-33041 Reachable assertion in WLAN Firmware
- CVE-2023-33040 Buffer Over-read in Data Modem
- CVE-2023-3304 Improper Access Control in admidio/admidio
- CVE-2023-33039 Use After Free in Automotive Display
- CVE-2023-33038 Integer Overflow or Wraparound in Radio Interface Layer
- CVE-2023-33037 Cryptographic Issues in Automotive
- CVE-2023-33036 NULL Pointer Dereference in Hypervisor
- CVE-2023-33035 Buffer Copy Without Checking Size of Input in Audio
- CVE-2023-33034 Signed-to-unsigned conversion error in Audio
- CVE-2023-33033 Use of Out-of-range Pointer Offset in Audio
- CVE-2023-33032 Integer Overflow or Wraparound in TZ Secure OS
- CVE-2023-33031 Buffer Copy Without Checking Size of Input in Automotive Audio
- CVE-2023-33030 Buffer Copy without Checking Size of Input in HLOS
- CVE-2023-3303 Improper Access Control in admidio/admidio
- CVE-2023-33029 Use After Free in DSP Service
- CVE-2023-33028 Buffer Copy without Checking Size of Input in WLAN Firmware
- CVE-2023-33027 Buffer Over-read in WLAN Firmware
- CVE-2023-33026 Buffer over-read in WLAN Firmware
- CVE-2023-33025 Buffer Copy without Checking Size of Input in Data Modem
- CVE-2023-33024 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Radio Interface Layer
- CVE-2023-33023 Buffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in SPS-Applications
- CVE-2023-33022 Integer Overflow to Buffer Overflow in HLOS
- CVE-2023-33021 Use After Free in Graphics
- CVE-2023-33020 Improper Authorization in WLAN Host
- CVE-2023-3302 Improper Neutralization of Formula Elements in a CSV File in admidio/admidio
- CVE-2023-33019 Improper Authorization in WLAN Host
- CVE-2023-33018 Integer Overflow to Buffer Overflow in User Identity Module
- CVE-2023-33017 Buffer Copy Without Checking Size of Input in Boot
- CVE-2023-33016 Buffer Over-read in WLAN Firmware
- CVE-2023-33015 Buffer Over-read in WLAN Firmware
- CVE-2023-33014 Improper Input Validation in Services
- CVE-2023-33013 Command injection in NBG6604 firmware
- CVE-2023-33012 Command injection in ATP series firmware
- CVE-2023-33011 Memory corruption in ATP series firmware
- CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow
- CVE-2023-3301 Triggerable assertion due to race condition in hot-unplug
- CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow
- CVE-2023-33008 Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale
- CVE-2023-33007 Jenkins LoadComplete support Plugin Cross-site Scripting vulnerability
- CVE-2023-33006 Jenkins WSO2 Oauth Plugin cross-site request forgery vulnerability
- CVE-2023-33005 Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
- CVE-2023-33004 Jenkins Tag Profiler Plugin missing permission check
- CVE-2023-33003 Jenkins Tag Profiler Plugin vulnerable to Cross-Site Request Forgery
- CVE-2023-33002 TestComplete support Plugin vulnerable to stored Cross-site Scripting
- CVE-2023-33001 Jenkins HashiCorp Vault Plugin has improper masking of credentials
- CVE-2023-33000 Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
- CVE-2023-3300 Nomad Search API Leaks Information About CSI Plugins
- CVE-2023-32999 Jenkins AppSpider Plugin missing permission check
- CVE-2023-32998 Jenkins AppSpider Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-32997 Jenkins CAS Plugin Session Fixation vulnerability
- CVE-2023-32996 Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
- CVE-2023-32995 Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-32994 Jenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation
- CVE-2023-32993 Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
- CVE-2023-32992 Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
- CVE-2023-32991 Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-32990 Jenkins Azure VM Agents Plugin missing permission checks
- CVE-2023-3299 Nomad Caller ACL Token's Secret ID is Exposed to Sentinel
- CVE-2023-32989 Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
- CVE-2023-32988 Jenkins Azure VM Agents Plugin missing permission checks
- CVE-2023-32987 Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
- CVE-2023-32986 Jenkins File Parameter Plugin arbitrary file write vulnerability
- CVE-2023-32985 Jenkins Sidebar Link Plugin vulnerable to Path Traversal
- CVE-2023-32984 Jenkins TestNG Results Plugin Stored Cross-site Scripting vulnerability
- CVE-2023-32983 Jenkins Ansible Plugin job configuration form does not mask variables
- CVE-2023-32982 Jenkins Ansible Plugin stores and displays secrets in plain text
- CVE-2023-32981 Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
- CVE-2023-32980 Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-32979 Jenkins Email Extension Plugin missing permission check
- CVE-2023-32978 Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
- CVE-2023-32977 Jenkins Pipeline: Job Plugin vulnerable to stored Cross-site Scripting
- CVE-2023-32976 Container Station
- CVE-2023-32975 QTS, QuTS hero
- CVE-2023-32974 QTS, QuTS hero, QuTScloud
- CVE-2023-32973 QTS, QuTS hero, QuTScloud
- CVE-2023-32972 QTS, QuTS hero, QuTScloud
- CVE-2023-32971 QTS, QuTS hero, QuTScloud
- CVE-2023-32970 QTS, QuTS hero, QuTScloud
- CVE-2023-3297 Use after free in AccountService
- CVE-2023-32969 Network & Virtual Switch
- CVE-2023-32968 QTS, QuTS hero
- CVE-2023-32967 QTS, QuTScloud
- CVE-2023-32966 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
- CVE-2023-32965 WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32964 WordPress Better Notifications for WP Plugin <= 1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32963 WordPress Predictive Search for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability
- CVE-2023-32962 WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32961 WordPress Zotpress Plugin <= 7.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32960 WordPress UpdraftPlus Plugin <= 1.23.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32959 WordPress MetroStore theme <= 1.3.2 - Broken Access Control
- CVE-2023-32958 WordPress Novelist Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32957 WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32956 Command injection in Synology Router Manager (SRM)
- CVE-2023-32955 Command injection in Synology Router Manager (SRM)
- CVE-2023-3295 File upload in Unlimited Elements For Elementor
- CVE-2023-3294 Cross-site Scripting (XSS) - DOM in saleor/react-storefront
- CVE-2023-3293 Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core