Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 314 of 430.
- CVE-2023-32019 Windows Kernel Information Disclosure Vulnerability
- CVE-2023-32018 Windows Hello Remote Code Execution Vulnerability
- CVE-2023-32017 Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
- CVE-2023-32016 Windows Installer Information Disclosure Vulnerability
- CVE-2023-32015 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- CVE-2023-32014 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
- CVE-2023-32013 Windows Hyper-V Denial of Service Vulnerability
- CVE-2023-32012 Windows Container Manager Service Elevation of Privilege Vulnerability
- CVE-2023-32011 Windows iSCSI Discovery Service Denial of Service Vulnerability
- CVE-2023-32010 Windows Bus Filter Driver Elevation of Privilege Vulnerability
- CVE-2023-3201 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- CVE-2023-32009 Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
- CVE-2023-32008 Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
- CVE-2023-32007 Apache Spark: Shell command injection via Spark UI
- CVE-2023-32006 Security feature bypass in Node
- CVE-2023-32005 Security feature bypass in Node
- CVE-2023-32004 Path traversal in Node
- CVE-2023-32003 Path traversal in Node
- CVE-2023-32002 Security feature bypass in Node
- CVE-2023-32000 Cross-site scripting in UniFi Network Application
- CVE-2023-3200 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Message Update
- CVE-2023-31999 @fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state
- CVE-2023-31998 Memory corruption in Aircube
- CVE-2023-31997 Misconfiguration in UniFi OS
- CVE-2023-31996 Command injection in hanwhavision:ane-l6012r firmware
- CVE-2023-31995 Cross-site scripting in hanwhavision:ane-l6012r firmware
- CVE-2023-31994 Denial of service in hanwhavision:ane-l6012r firmware
- CVE-2023-3199 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Title Update
- CVE-2023-31986 Command injection in edimax:br-6428ns firmware
- CVE-2023-31985 Command injection in edimax:br-6428ns firmware
- CVE-2023-31983 Command injection in edimax:br-6428ns firmware
- CVE-2023-31982 Memory corruption in irontec:sngrep
- CVE-2023-31981 Memory corruption in irontec:sngrep
- CVE-2023-3198 MStore API <= 3.9.6 - Cross-Site Request Forgery to Order Status Update
- CVE-2023-31979 Memory corruption in fossies:catdoc
- CVE-2023-31976 Memory corruption in libming:libming
- CVE-2023-31975 Denial of service in yasm project:yasm
- CVE-2023-31974 Use after free in tortall:yasm
- CVE-2023-31973 Use after free in tortall:yasm
- CVE-2023-31972 Use after free in tortall:yasm
- CVE-2023-3197 MStore API <= 4.0.1 - Unauthenticated SQL Injection
- CVE-2023-3196 Multiple vulnerabilities in Canopsis of Capensis
- CVE-2023-3195 Memory corruption in ImageMagick
- CVE-2023-31946 File upload in online travel agency system project:online travel agency system
- CVE-2023-31945 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31944 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31943 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31942 Cross-site scripting in online travel agency system project:online travel agency system
- CVE-2023-31941 File upload in online travel agency system project:online travel agency system
- CVE-2023-31940 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31939 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31938 SQL injection in online travel agency system project:online travel agency system
- CVE-2023-31937 SQL injection in phpgurukul:rail pass management system
- CVE-2023-31936 SQL injection in phpgurukul:rail pass management system
- CVE-2023-31935 Cross-site scripting in phpgurukul:rail pass management system
- CVE-2023-31934 Cross-site scripting in phpgurukul:rail pass management system
- CVE-2023-31933 SQL injection in phpgurukul:rail pass management system
- CVE-2023-31932 SQL injection in phpgurukul:rail pass management system
- CVE-2023-3193 Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
- CVE-2023-31928 XSS vulnerability in Brocade Webtools
- CVE-2023-31927 An information disclosure in the web interface of Brocade Fabric OS
- CVE-2023-31926 Arbitrary File Overwrite using less command
- CVE-2023-31925 Storage of clear text password in Brocade SANnav
- CVE-2023-31923 Privilege escalation in supremainc:biostar 2
- CVE-2023-31922 Memory corruption in quickjs project:quickjs
- CVE-2023-31921 Denial of service in jerryscript:jerryscript
- CVE-2023-31920 Denial of service in jerryscript:jerryscript
- CVE-2023-3192 Session Fixation in froxlor/froxlor
- CVE-2023-31919 Denial of service in jerryscript:jerryscript
- CVE-2023-31918 Denial of service in jerryscript:jerryscript
- CVE-2023-31916 Denial of service in jerryscript:jerryscript
- CVE-2023-31914 Denial of service in jerryscript:jerryscript
- CVE-2023-31913 Denial of service in jerryscript:jerryscript
- CVE-2023-31910 Memory corruption in jerryscript:jerryscript
- CVE-2023-3191 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
- CVE-2023-31908 Memory corruption in jerryscript:jerryscript
- CVE-2023-31907 Memory corruption in jerryscript:jerryscript
- CVE-2023-31906 Memory corruption in jerryscript:jerryscript
- CVE-2023-31904 Path traversal in savysoda:wifi hd wireless disk drive
- CVE-2023-31903 File upload in freeguppy:guppy
- CVE-2023-31902 Other in mobilemouse:mobile mouse
- CVE-2023-3190 Improper Encoding or Escaping of Output in nilsteampassnet/teampass
- CVE-2023-31893 Denial of service in telefonica:brasil vivo play firmware
- CVE-2023-31890 glazedlists XML Deserialization vulnerability
- CVE-2023-3189 SourceCodester Online School Fees System POST Parameter branch.php cross site scripting
- CVE-2023-31889 An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a d
- CVE-2023-3188 Server-Side Request Forgery (SSRF) in owncast/owncast
- CVE-2023-31874 Code injection in yank-note:yank note
- CVE-2023-31873 Code injection in gin project:gin
- CVE-2023-31871 Privilege escalation in opentext:documentum content server
- CVE-2023-3187 PHPGurukul Teachers Record Management System Profile Picture changeimage.php unrestricted upload
- CVE-2023-31868 Cross-site scripting in sage:x3
- CVE-2023-31867 Code injection in sage:x3
- CVE-2023-31862 Cross-site scripting in jizhicms:jizhicms
- CVE-2023-31861 Path traversal in zlmediakit:zlmediakit
- CVE-2023-31860 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2023-3186 Supsystic Popup < 1.10.19 - Prototype Pollution
- CVE-2023-31857 File upload in oretnom23:online computer and laptop store
- CVE-2023-31856 Command injection in totolink:cp300\+ firmware
- CVE-2023-31854 std::bad_alloc is mishandled in Precomp 0.4.8.