Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 316 of 430.
- CVE-2023-3164 Heap-buffer-overflow in extractimagesection()
- CVE-2023-31634 Auth bypass in teslamate:teslamate
- CVE-2023-31631 Denial of service in openlinksw:virtuoso
- CVE-2023-31630 Denial of service in openlinksw:virtuoso
- CVE-2023-3163 y_project RuoYi filterKeyword resource consumption
- CVE-2023-31629 Denial of service in openlinksw:virtuoso
- CVE-2023-31628 Denial of service in openlinksw:virtuoso
- CVE-2023-31627 Denial of service in openlinksw:virtuoso
- CVE-2023-31626 Denial of service in openlinksw:virtuoso
- CVE-2023-31625 Denial of service in openlinksw:virtuoso
- CVE-2023-31624 Denial of service in openlinksw:virtuoso
- CVE-2023-31623 Denial of service in openlinksw:virtuoso
- CVE-2023-31622 Denial of service in openlinksw:virtuoso
- CVE-2023-31621 Denial of service in openlinksw:virtuoso
- CVE-2023-31620 Denial of service in openlinksw:virtuoso
- CVE-2023-3162 Stripe Payment Plugin for WooCommerce <= 3.7.7 - Authentication Bypass
- CVE-2023-31619 Denial of service in openlinksw:virtuoso
- CVE-2023-31618 Denial of service in openlinksw:virtuoso
- CVE-2023-31617 Denial of service in openlinksw:virtuoso
- CVE-2023-31616 Denial of service in openlinksw:virtuoso
- CVE-2023-31615 Denial of service in openlinksw:virtuoso
- CVE-2023-31614 Denial of service in openlinksw:virtuoso
- CVE-2023-31613 Denial of service in openlinksw:virtuoso
- CVE-2023-31612 Denial of service in openlinksw:virtuoso
- CVE-2023-31611 Denial of service in openlinksw:virtuoso
- CVE-2023-31610 Denial of service in openlinksw:virtuoso
- CVE-2023-3161 Memory corruption in Linux Kernel (fbcon)
- CVE-2023-31609 Denial of service in openlinksw:virtuoso
- CVE-2023-31608 Denial of service in openlinksw:virtuoso
- CVE-2023-31607 Denial of service in openlinksw:virtuoso
- CVE-2023-31606 RedCloth Regular Expression Denial of Service issue
- CVE-2023-3160 Local privilege escalation in security products for Windows
- CVE-2023-31597 Auth bypass in zammad:zammad
- CVE-2023-31595 Missing authorization in icrealtime:icip-p2012t firmware
- CVE-2023-31594 Missing authorization in icrealtime:icip-p2012t firmware
- CVE-2023-3159 Use after free in Kernel
- CVE-2023-31587 Command injection in tenda:ac5 firmware
- CVE-2023-31585 Grocery-CMS-PHP-Restful-API v1.3 is vulnerable to File Upload via /admin/add-category.php.
- CVE-2023-31584 Cross-site scripting in silicon project:silicon
- CVE-2023-31582 jose4j uses weak cryptographic algorithm
- CVE-2023-31581 Sureness uses hardcoded key
- CVE-2023-31580 light-oauth2 missing public key verification
- CVE-2023-3158 Mail Control <= 0.2.8 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31579 Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
- CVE-2023-31576 File upload in s9y:serendipity
- CVE-2023-31572 Privilege escalation in bludit:bludit
- CVE-2023-31569 Command injection in totolink:x5000r firmware
- CVE-2023-31568 Memory corruption in podofo project:podofo
- CVE-2023-31567 Memory corruption in podofo project:podofo
- CVE-2023-31566 Use after free in podofo project:podofo
- CVE-2023-31556 Memory corruption in podofo project:podofo
- CVE-2023-31555 Memory corruption in podofo project:podofo
- CVE-2023-3155 NextGEN Gallery < 3.39 - Admin+ Arbitrary File Read and Delete
- CVE-2023-31548 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-31546 Cross-site scripting in dedebiz:dedebiz
- CVE-2023-31544 alkacon-OpenCMS vulnerable to stored Cross-site Scripting
- CVE-2023-31543 pipreqs vulnerable to Dependency Confusion
- CVE-2023-31541 File upload in ckeditor:ckeditor
- CVE-2023-3154 NextGEN Gallery < 3.39 - Admin+ PHAR Deserialization
- CVE-2023-31531 Command injection in motorola:cx2l firmware
- CVE-2023-31530 Command injection in motorola:cx2l firmware
- CVE-2023-3153 Service monitor mac flow is not rate limited
- CVE-2023-31529 Command injection in motorola:cx2l firmware
- CVE-2023-31528 Command injection in motorola:cx2l firmware
- CVE-2023-3152 SourceCodester Online Discussion Forum Site view_post.php sql injection
- CVE-2023-31519 SQL injection in pharmacy management system project:pharmacy management system
- CVE-2023-31518 Use after free in teeworlds:teeworlds
- CVE-2023-31517 Denial of service in teeworlds:teeworlds
- CVE-2023-3151 SourceCodester Online Discussion Forum Site manage_user.php sql injection
- CVE-2023-31506 Cross-site scripting (XSS) vulnerability in Grav
- CVE-2023-31505 File upload in schlix:cms
- CVE-2023-31502 Code injection in apsystems:alternergy power control software
- CVE-2023-3150 SourceCodester Online Discussion Forum Site manage_post.php sql injection
- CVE-2023-31498 Auth bypass in phpgurukul:hospital management system
- CVE-2023-31497 Privilege escalation in seqrite:end point security
- CVE-2023-31493 Code injection in zoneminder:zoneminder
- CVE-2023-31492 Information disclosure in zohocorp:manageengine admanager plus
- CVE-2023-31490 Denial of service in debian:debian linux
- CVE-2023-3149 SourceCodester Online Discussion Forum Site manage_user.php sql injection
- CVE-2023-31489 Denial of service in fedoraproject:fedora
- CVE-2023-31488 Memory corruption in cisco:ironport email security appliance
- CVE-2023-31486 Security feature bypass in http\:\
- CVE-2023-31485 Security feature bypass in gitlab\:\
- CVE-2023-31484 Security feature bypass in cpanpm project:cpanpm
- CVE-2023-31483 Path traversal in cauldrondevelopment:cbang
- CVE-2023-3148 SourceCodester Online Discussion Forum Site manage_post.php sql injection
- CVE-2023-31478 Information disclosure in gl-inet:gl-a1300 firmware
- CVE-2023-31477 Path traversal in gl-inet:gl-a1300 firmware
- CVE-2023-31476 Path traversal in gl-inet:gl-mv1000 firmware
- CVE-2023-31475 Memory corruption in gl-inet:gl-a1300 firmware
- CVE-2023-31474 Path traversal in gl-inet:gl-a1300 firmware
- CVE-2023-31473 Command injection in gl-inet:gl-a1300 firmware
- CVE-2023-31472 Command injection in gl-inet:gl-a1300 firmware
- CVE-2023-31471 Security feature bypass in gl-inet:gl-a1300 firmware
- CVE-2023-31470 Memory corruption in pymumu:smartdns
- CVE-2023-3147 SourceCodester Online Discussion Forum Site view_category.php sql injection
- CVE-2023-31469 Apache StreamPipes: Privilege escalation through non-admin user
- CVE-2023-31468 Misconfiguration in inosoft:visiwin 7
- CVE-2023-31466 Cross-site scripting in fsmlabs:timekeeper
- CVE-2023-31465 Command injection in fsmlabs:timekeeper