Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 315 of 430.
- CVE-2023-31853 Cross-site scripting in cudy:lt400 firmware
- CVE-2023-31852 Cross-site scripting in cudy:lt400 firmware
- CVE-2023-31851 Cross-site scripting in cudy:lt400 firmware
- CVE-2023-31848 Server-side request forgery in davinci project:davinci
- CVE-2023-31847 Server-side request forgery in davinci project:davinci
- CVE-2023-31845 SQL injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-31844 SQL injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-31843 SQL injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-31842 SQL injection in faculty evaluation system project:faculty evaluation system
- CVE-2023-3184 SourceCodester Sales Tracker Management System cross site scripting
- CVE-2023-3183 SourceCodester Performance Indicator System addproduct.php cross site scripting
- CVE-2023-31826 Command injection in nevado-jms
- CVE-2023-31825 Information disclosure in inageya:inageya
- CVE-2023-31824 Information disclosure in dericia:delicia
- CVE-2023-31823 Information disclosure in marui:marui
- CVE-2023-31822 Information disclosure in entetsu:entetsu store
- CVE-2023-31821 Information disclosure in albis:albis
- CVE-2023-31820 Information disclosure in shizutetsu:shizutetsu store
- CVE-2023-3182 Membership Plugin - Restrict Content < 3.2.3 - Reflected XSS
- CVE-2023-31819 Information disclosure in keisei store:livre
- CVE-2023-31818 Information disclosure in marukyu:marukyu line
- CVE-2023-31816 Cross-site scripting in content management system project:content management system
- CVE-2023-31814 Path traversal in dlink:dir-300 firmware
- CVE-2023-3181 Insecure Permissions in Splashtop Software Updater
- CVE-2023-31808 Hardcoded credentials in technicolor:tg670 firmware
- CVE-2023-31807 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31806 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31805 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31804 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31803 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31802 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31801 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31800 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-3180 Heap buffer overflow in virtio_crypto_sym_op_helper()
- CVE-2023-31799 Cross-site scripting in chamilo:chamilo lms
- CVE-2023-31794 Denial of service in artifex:mupdf
- CVE-2023-3179 POST SMTP Mailer < 2.5.7 - Account Takeover via CSRF
- CVE-2023-3178 POST SMTP Mailer < 2.5.7 - Arbitrary Log Deletion via CSRF
- CVE-2023-31779 Cross-site scripting in wekan project:wekan
- CVE-2023-3177 SourceCodester Lost and Found Information System view_inquiry.php sql injection
- CVE-2023-31763 Auth bypass in agshome smart alarm project:agshome smart alarm firmware
- CVE-2023-31762 Auth bypass in mydigoo:dg-hamb firmware
- CVE-2023-31761 Auth bypass in blitzwolf:bw-is22 firmware
- CVE-2023-3176 SourceCodester Lost and Found Information System manage_user.php sql injection
- CVE-2023-31759 Auth bypass in keruistore:kerui w18 firmware
- CVE-2023-31757 Cross-site scripting in dedecms:dedecms
- CVE-2023-31756 Command injection in tp-link:archer vr1600v firmware
- CVE-2023-31754 Cross-site scripting in optimizely:optimizely cms
- CVE-2023-31753 SQL injection in endonesia:endonesia
- CVE-2023-31752 SQL injection in oretnom23:employee and visitor gate pass logging system
- CVE-2023-3175 AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting
- CVE-2023-31748 Privilege escalation in wondershare:mobiletrans
- CVE-2023-31747 Privilege escalation in wondershare:filmora
- CVE-2023-31746 Command injection in adslr:vw2100 firmware
- CVE-2023-31742 Command injection in linksys:wrt54gl firmware
- CVE-2023-31741 Command injection in linksys:e2000 firmware
- CVE-2023-31740 Command injection in linksys:e2000 firmware
- CVE-2023-3173 Improper Restriction of Excessive Authentication Attempts in froxlor/froxlor
- CVE-2023-31729 Command injection in totolink:a3300r firmware
- CVE-2023-31728 Security feature bypass in teltonika-networks:rut240 firmware
- CVE-2023-31726 Missing authorization in alistgo:alist
- CVE-2023-31725 Use after free in yasm project:yasm
- CVE-2023-31724 Memory corruption in yasm project:yasm
- CVE-2023-31723 Memory corruption in yasm project:yasm
- CVE-2023-31722 Memory corruption in nasm:netwide assembler
- CVE-2023-3172 Path Traversal in froxlor/froxlor
- CVE-2023-31719 FUXA SQL Injection vulnerability
- CVE-2023-31718 FUXA local file inclusion vulnerability
- CVE-2023-31717 FUXA SQL Injection vulnerability
- CVE-2023-31716 FUXA vulnerable to Local File Inclusion
- CVE-2023-31714 SQL injection in waqaskanju:chitor-cms
- CVE-2023-31710 Memory corruption in tp-link:archer ax21 firmware
- CVE-2023-3171 Eap-7: heap exhaustion via deserialization
- CVE-2023-31708 Cross-site request forgery in eyoucms:eyoucms
- CVE-2023-31707 SQL injection in sem-cms:semcms
- CVE-2023-31705 Cross-site scripting in task reminder system project:task reminder system
- CVE-2023-31704 Privilege escalation in oretnom23:online computer and laptop store
- CVE-2023-31703 Cross-site scripting in escanav:escan management console
- CVE-2023-31702 SQL injection in escanav:escan management console
- CVE-2023-31701 Command injection in tp-link:tl-wpa4530 kit firmware
- CVE-2023-31700 Command injection in tp-link:tl-wpa4530 kit firmware
- CVE-2023-3170 tagDiv Composer < 4.2 - Admin+ Stored XSS
- CVE-2023-31699 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-31698 Cross-site scripting in bludit:bludit
- CVE-2023-3169 tagDiv Composer < 4.2 - Unauthenticated Stored XSS
- CVE-2023-31689 File upload in wcms:wcms
- CVE-2023-3168 WP Reroute Email <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31679 Missing authorization in videogo project:videogo
- CVE-2023-31678 Auth bypass in videogo project:videogo
- CVE-2023-31677 Missing authorization in luowice:luowice
- CVE-2023-31672 SQL injection in ai-dev:ailinear
- CVE-2023-31671 SQL injection in webbax:postfinance
- CVE-2023-31670 Denial of service in webassembly:webassembly binary toolkit
- CVE-2023-3167 Mail Queue <= 1.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31669 Denial of service in webassembly:webassembly binary toolkit
- CVE-2023-31664 Cross-site scripting in wso2:api manager
- CVE-2023-3166 Lana Email Logger <= 1.0.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31655 Denial of service in redis:redis
- CVE-2023-31654 Other in redis:redisraft
- CVE-2023-3165 SourceCodester Life Insurance Management System POST Parameter insertNominee.php cross site scripting