Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 310 of 430.
- CVE-2023-32398 Use after free in iOS and iPadOS
- CVE-2023-32397 Business logic in iOS and iPadOS
- CVE-2023-32396 Privilege escalation in Xcode
- CVE-2023-32395 Business logic in macOS
- CVE-2023-32394 Security feature bypass in iOS and iPadOS
- CVE-2023-32393 Memory corruption in iOS and iPadOS
- CVE-2023-32392 Information disclosure in iOS and iPadOS
- CVE-2023-32391 Security feature bypass in iOS and iPadOS
- CVE-2023-32390 Information disclosure in iOS and iPadOS
- CVE-2023-3239 OTCMS path traversal
- CVE-2023-32389 Information disclosure in iOS and iPadOS
- CVE-2023-32388 Security feature bypass in iOS and iPadOS
- CVE-2023-32387 Use after free in macOS
- CVE-2023-32386 Information disclosure in macOS
- CVE-2023-32385 Denial of service in iOS and iPadOS
- CVE-2023-32384 Memory corruption in iOS and iPadOS
- CVE-2023-32383 Code injection in macOS
- CVE-2023-32382 Memory corruption in macOS
- CVE-2023-32381 Use after free in iOS and iPadOS
- CVE-2023-32380 Memory corruption in macOS
- CVE-2023-3238 OTCMS server-side request forgery
- CVE-2023-32379 Memory corruption in macOS
- CVE-2023-32378 Use after free in macOS
- CVE-2023-32377 Memory corruption in macOS
- CVE-2023-32376 Security feature bypass in iOS and iPadOS
- CVE-2023-32375 Memory corruption in macOS
- CVE-2023-32373 Apple Multiple Products WebKit Use-After-Free
- CVE-2023-32372 Memory corruption in iOS and iPadOS
- CVE-2023-32371 Security feature bypass in iOS and iPadOS
- CVE-2023-32370 Security feature bypass in macOS
- CVE-2023-3237 OTCMS hard-coded password
- CVE-2023-32369 Business logic in macOS
- CVE-2023-32368 Memory corruption in iOS and iPadOS
- CVE-2023-32367 Missing authorization in iOS and iPadOS
- CVE-2023-32366 Memory corruption in iOS and iPadOS
- CVE-2023-32365 Security feature bypass in iOS and iPadOS
- CVE-2023-32364 Security feature bypass in macOS
- CVE-2023-32363 Security feature bypass in macOS
- CVE-2023-32362 Information disclosure in macOS
- CVE-2023-32361 Information disclosure in iOS and iPadOS
- CVE-2023-32360 Auth bypass in macOS
- CVE-2023-3236 mccms Comic.php pic_save server-side request forgery
- CVE-2023-32359 Information disclosure in iOS and iPadOS
- CVE-2023-32358 Memory corruption in iOS and iPadOS
- CVE-2023-32357 Missing authorization in iOS and iPadOS
- CVE-2023-32356 Memory corruption in macOS
- CVE-2023-32355 Business logic in macOS
- CVE-2023-32354 Memory corruption in iOS and iPadOS
- CVE-2023-32353 Privilege escalation in iTunes for Windows
- CVE-2023-32352 Security feature bypass in iOS and iPadOS
- CVE-2023-32351 Privilege escalation in iTunes for Windows
- CVE-2023-32350 Command injection in RUT model routers
- CVE-2023-3235 mccms Comic.php pic_api server-side request forgery
- CVE-2023-32349 Code injection in RUT model routers
- CVE-2023-32348 Server-side request forgery in Remote Management System
- CVE-2023-32347 Auth bypass in Remote Management System
- CVE-2023-32346 Information disclosure in Remote Management System
- CVE-2023-32344 IBM Cognos Analytics cross-site request forgery
- CVE-2023-32342 IBM GSKit information disclosure
- CVE-2023-32341 IBM Sterling B2B Integrator denial of service
- CVE-2023-32340 IBM Sterling B2B Integrator cross-site scripting
- CVE-2023-3234 Zhong Bang CRMEB PublicController.php put_image deserialization
- CVE-2023-32339 IBM Business Automation Workflow cross-site scripting
- CVE-2023-32338 IBM Sterling Secure Proxy information disclosure
- CVE-2023-32337 IBM Maximo Spatial Asset Management server-side request forgery
- CVE-2023-32336 IBM InfoSphere Information Server code execution
- CVE-2023-32335 IBM Maximo Application Suite information disclosure
- CVE-2023-32334 IBM Maximo Asset Management information disclosure
- CVE-2023-32333 IBM Maximo Asset Management improper access control
- CVE-2023-32332 IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection
- CVE-2023-32331 IBM Connect:Express for UNIX denial of service
- CVE-2023-32330 IBM Security Verify Access man in the middle
- CVE-2023-3233 Zhong Bang CRMEB PublicController.php get_image_base64 server-side request forgery
- CVE-2023-32329 IBM Security Access Manager Container improper file validation
- CVE-2023-32328 IBM Security Verify Access information disclosure
- CVE-2023-32327 IBM Security Access Manager Container XML external entity injection
- CVE-2023-32325 Cross-site scripting in PostHog-js
- CVE-2023-32324 OpenPrinting CUPS vulnerable to heap buffer overflow
- CVE-2023-32323 Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
- CVE-2023-32322 Arbitrary file read in Ombi
- CVE-2023-32321 CKAN remote code execution and private information access via crafted resource ids
- CVE-2023-32320 Nextcloud Server's brute force protection allows someone to send more requests than intended
- CVE-2023-3232 Zhong Bang CRMEB Image Upload app_auth deserialization
- CVE-2023-32319 Basic auth header on WebDAV requests is not brute-force protected in Nextcloud
- CVE-2023-32318 User session not correctly destroyed on logout
- CVE-2023-32317 Autolab tar slip in cheat checker functionality (`GHSL-2023-082`)
- CVE-2023-32316 Users can add themselves to any organization in CloudExplorer Lite
- CVE-2023-32315 Ignite Realtime Openfire Path Traversal
- CVE-2023-32314 Sandbox Escape
- CVE-2023-32313 Inspect method manipulation in vm2
- CVE-2023-32312 Client secret not mandatory in UmbracoIdentityExtensions
- CVE-2023-32311 The CloudExplorer Lite missing permissions check
- CVE-2023-32310 DataEase API interface has IDOR vulnerability
- CVE-2023-3231 UJCMS ZIP Package information disclosure
- CVE-2023-32309 Arbitrary file inclusion with the pymdowm-snippets extension
- CVE-2023-32308 SQL Injection Vulnerability in anuko timetracker
- CVE-2023-32307 heap-over-flow and integer-overflow in sofia-sip
- CVE-2023-32306 Time Tracker has Blind SQL Injection Vulnerability in Reports
- CVE-2023-32305 aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path
- CVE-2023-32303 Planet's secret file is created with excessive permissions