Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 312 of 430.
- CVE-2023-32208 Information disclosure in Firefox
- CVE-2023-32207 Security feature bypass in Firefox
- CVE-2023-32206 Memory corruption in Firefox
- CVE-2023-32205 Security feature bypass in Firefox
- CVE-2023-32204 Privilege escalation in Intel(R) OFU software
- CVE-2023-32203 Horner Automation Cscape Out-of-bounds Write
- CVE-2023-32202 Walchem Intuition Improper Authentication
- CVE-2023-32201 Memory corruption in TELLUS and TELLUS Lite
- CVE-2023-32200 Apache Jena: Exposure of execution in script engine expressions.
- CVE-2023-3220 Null dereference in Linux kernel
- CVE-2023-32199 Rancher user retains access to clusters despite Global Role removal
- CVE-2023-32198 Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
- CVE-2023-32197 Rancher's External RoleTemplates can lead to privilege escalation
- CVE-2023-32196 Rancher's External RoleTemplates can lead to privilege escalation
- CVE-2023-32194 Rancher permissions on 'namespaces' in any API group grants 'edit' permissions on namespaces in 'core'
- CVE-2023-32193 Norman API Cross-site Scripting Vulnerability
- CVE-2023-32192 Rancher API Server Cross-site Scripting Vulnerability
- CVE-2023-32191 rke's credentials are stored in the RKE1 Cluster state ConfigMap
- CVE-2023-32190 mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable
- CVE-2023-3219 EventON < 2.1.2 - Unauthenticated Post Access via IDOR
- CVE-2023-32189 Insecure handling SSH key in SUSE Manager when bootstrapping new clients
- CVE-2023-32188 JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
- CVE-2023-32187 K3s apiserver port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
- CVE-2023-32186 RKE2 supervisor port is vulnerable to unauthenticated remote denial-of-service (DoS) attack via TLS SAN stuffing attack
- CVE-2023-32184 Code injection in opensuse-welcome
- CVE-2023-32183 Misconfiguration in Tumbleweed
- CVE-2023-32182 Path traversal in SUSE Linux Enterprise Desktop 15 SP5
- CVE-2023-32181 Stack buffer overflow in "econf_writeFile" function
- CVE-2023-3218 Race Condition within a Thread in it-novum/openitcockpit
- CVE-2023-32179 VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability
- CVE-2023-32178 VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability
- CVE-2023-32177 VIPRE Antivirus Plus DeleteHistoryFile Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-32176 VIPRE Antivirus Plus SetPrivateConfig Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-32175 VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability
- CVE-2023-32174 Unified Automation UaGateway NodeManagerOpcUa Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-32173 Unified Automation UaGateway AddServer XML Injection Denial-of-Service Vulnerability
- CVE-2023-32172 Unified Automation UaGateway OPC UA Server Use-After-Free Denial-of-Service Vulnerability
- CVE-2023-32171 Unified Automation UaGateway OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-32170 Unified Automation UaGateway OPC UA Server Improper Input Validation Denial-of-Service Vulnerability
- CVE-2023-3217 Use after free in Chrome
- CVE-2023-32169 D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability
- CVE-2023-32168 D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability
- CVE-2023-32167 D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability
- CVE-2023-32166 D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability
- CVE-2023-32165 D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-32164 D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability
- CVE-2023-32163 Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability
- CVE-2023-32162 Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2023-32161 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32160 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-3216 Memory corruption in Chrome
- CVE-2023-32159 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32158 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32157 Tesla Model 3 bsa_server BIP Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
- CVE-2023-32156 Tesla Model 3 Gateway Firmware Signature Validation Bypass Vulnerability
- CVE-2023-32155 Tesla Model 3 bcmdhd Out-Of-Bounds Write Local Privilege Escalation Vulnerability
- CVE-2023-32154 Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32153 D-Link DIR-2640 EmailFrom Command Injection Remote Code Execution Vulnerability
- CVE-2023-32152 D-Link DIR-2640 HNAP LoginPassword Authentication Bypass Vulnerability
- CVE-2023-32151 D-Link DIR-2640 DestNetwork Command Injection Remote Code Execution Vulnerability
- CVE-2023-32150 D-Link DIR-2640 PrefixLen Command Injection Remote Code Execution Vulnerability
- CVE-2023-3215 Use after free in Chrome
- CVE-2023-32149 D-Link DIR-2640 prog.cgi Request Handling Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32148 D-Link DIR-2640 HNAP PrivateLogin Authentication Bypass Vulnerability
- CVE-2023-32147 D-Link DIR-2640 LocalIPAddress Command Injection Remote Code Execution Vulnerability
- CVE-2023-32146 D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32145 D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability
- CVE-2023-32144 D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32143 D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
- CVE-2023-32142 D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32141 D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32140 D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-3214 Use after free in Chrome
- CVE-2023-32139 D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32138 D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32137 D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability
- CVE-2023-32136 D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-32135 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-32134 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-32133 Sante DICOM Viewer Pro J2K File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32132 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32131 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-32130 WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3213 WP Mail SMTP Pro <= 3.8.0 - Missing Authorization to Information Dislcosure via is_print_page
- CVE-2023-32129 WordPress Editorialmag theme <= 1.1.9 - Authenticated Arbitrary Plugin Activation
- CVE-2023-32128 WordPress Cryptocurrency Donation Box – Bitcoin & Crypto Donations Plugin <= 2.2.7 is vulnerable to SQL Injection
- CVE-2023-32127 WordPress Multi Rating plugin <= 5.0.6 - Unauth Arbitrary rating value change
- CVE-2023-32126 WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-32125 WordPress Multi Rating Plugin <= 5.0.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32124 WordPress Publish Confirm Message Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32123 WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32122 WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32121 WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection
- CVE-2023-32120 WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS)
- CVE-2023-3212 Null dereference in Linux kernel (gfs2 file system)
- CVE-2023-32119 Cross-site scripting in WPO365 | Mail Integration for Office 365 / Outlook
- CVE-2023-32118 WordPress SALERT Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32117 WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-32116 WordPress Custom post types Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32115 SQL Injection in Master Data Synchronization (MDS COMPARE TOOL)