Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 317 of 430.
- CVE-2023-31462 Misconfiguration in steelseries:gg
- CVE-2023-31461 Path traversal in steelseries:gg
- CVE-2023-31460 Command injection in mitel:mivoice connect
- CVE-2023-3146 SourceCodester Online Discussion Forum Site manage_category.php sql injection
- CVE-2023-31459 Auth bypass in mitel:mivoice connect
- CVE-2023-31458 Auth bypass in mitel:mivoice connect
- CVE-2023-31457 Missing authorization in mitel:mivoice connect
- CVE-2023-31456 There is an SSRF vulnerability in the Fluid Topics platform that affects versions prior to 4.3, where the server can be forced to make arbit
- CVE-2023-31455 Denial of service in pexip:pexip infinity
- CVE-2023-31454 Apache InLong: IDOR make users can bind any cluster
- CVE-2023-31453 Apache InLong: IDOR make users can delete others' subscription
- CVE-2023-31452 Cross-site request forgery in paessler:prtg network monitor
- CVE-2023-31450 Path traversal in paessler:prtg network monitor
- CVE-2023-3145 SourceCodester Online Discussion Forum Site sql injection
- CVE-2023-31449 Path traversal in paessler:prtg network monitor
- CVE-2023-31448 Path traversal in paessler:prtg network monitor
- CVE-2023-31447 Code injection in draytek:vigor2620 firmware
- CVE-2023-31446 Command injection in cassianetworks:xc1000 firmware
- CVE-2023-31445 Information disclosure in cassianetworks:access controller
- CVE-2023-31444 Missing authorization in talend:studio
- CVE-2023-31442 Weak cryptography in lightbend:akka actor
- CVE-2023-31441 Denial of service in ncia:advisor network
- CVE-2023-3144 SourceCodester Online Discussion Forum Site manage_post.php cross site scripting
- CVE-2023-31439 Security feature bypass in systemd project:systemd
- CVE-2023-31438 Security feature bypass in systemd project:systemd
- CVE-2023-31437 Other in systemd project:systemd
- CVE-2023-31436 Memory corruption in linux:linux kernel
- CVE-2023-31435 Missing authorization in evasys:evasys
- CVE-2023-31434 Cross-site scripting in evasys:evasys
- CVE-2023-31433 SQL injection in evasys:evasys
- CVE-2023-31432 Privilege issues in multiple commands
- CVE-2023-31431 A buffer overflow vulnerability in “diagstatus” command
- CVE-2023-31430 buffer overflow vulnerability in “secpolicydelete” command
- CVE-2023-3143 SourceCodester Online Discussion Forum Site manage_post.php cross site scripting
- CVE-2023-31429 Multiple commands print sensitive information in the terminal
- CVE-2023-31428 CLI allows upload or transfer files of dangerous types
- CVE-2023-31427 Knowledge of full path name
- CVE-2023-31426 scp, sftp, ftp servers passwords in supportsave
- CVE-2023-31425 Privilege escalation via the fosexec command
- CVE-2023-31424 Web authentication and authorization bypass
- CVE-2023-31423 Possible information exposure through log file vulnerability
- CVE-2023-31422 Kibana Insertion of Sensitive Information into Log File
- CVE-2023-31421 Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue
- CVE-2023-3142 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-31419 Elasticsearch StackOverflow vulnerability
- CVE-2023-31418 Elasticsearch uncontrolled resource consumption
- CVE-2023-31417 Elasticsearch Insertion of sensitive information in audit logs
- CVE-2023-31416 Elastic Cloud on Kubernetes (ECK) secret token configuration issue
- CVE-2023-31415 Code injection in Kibana
- CVE-2023-31414 Code injection in Kibana
- CVE-2023-31413 Information disclosure in Filebeat
- CVE-2023-31412 Weak cryptography in LMS5xx
- CVE-2023-31411 Missing authorization in EventCam App
- CVE-2023-31410 Weak cryptography in EventCam App
- CVE-2023-3141 Use after free in Kernel
- CVE-2023-31409 Denial of service in SICK FTMG-ESD15AXX AIR FLOW SENSOR
- CVE-2023-31408 Information disclosure in SICK FTMG-ESD15AXX AIR FLOW SENSOR
- CVE-2023-31407 Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation
- CVE-2023-31406 Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-31405 Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)
- CVE-2023-31404 Information Disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Service)
- CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation
- CVE-2023-3140 KNIME Hub Web Application is vulnerable to clickjacking
- CVE-2023-3139 Protect WP Admin < 4.0 - Unauthenticated Protection Bypass
- CVE-2023-3138 Memory corruption in libX11
- CVE-2023-31366 Memory corruption in μProf Tool
- CVE-2023-31365 Integer overflow in AMD Radeon™ PRO V710 Graphics Products
- CVE-2023-31364 Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- CVE-2023-31361 Privilege escalation in AIM-T (AMD Integrated Management Technology) software
- CVE-2023-31360 Misconfiguration in AIM-T(AMD Integrated Management Technology) software
- CVE-2023-3136 MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31359 Misconfiguration in AIM-T Manageability API
- CVE-2023-31358 Privilege escalation in AIM-T Manageability API
- CVE-2023-31356 Other in AMD EPYC™ 7003 Processors
- CVE-2023-31355 Memory corruption in 3rd Gen AMD EPYC™ Processors
- CVE-2023-31352 Memory corruption in AMD EPYC™ 9004 Processors
- CVE-2023-31351 Memory corruption in AMD EPYC™ 7003 Series Processors
- CVE-2023-3135 Mailtree Log Mail <= 1.0.0 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-31349 Misconfiguration in μProf Tool
- CVE-2023-31348 Privilege escalation in μProf Tool
- CVE-2023-31347 Security feature bypass in 3rd Gen AMD EPYC™ Processors
- CVE-2023-31346 Information disclosure in 3rd Gen AMD EPYC™ Processors
- CVE-2023-31345 Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- CVE-2023-31343 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2023-31342 Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2023-31341 Memory corruption in μProf Tool
- CVE-2023-3134 Forminator < 1.24.4 - Reflected XSS
- CVE-2023-31339 Memory corruption in Zynq™ UltraScale+™ MPSoC/RFSoC
- CVE-2023-31331 Memory corruption in AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics
- CVE-2023-31330 Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
- CVE-2023-3133 Tutor LMS < 2.2.1 - Unauthenticated Access to Tutor LMS Lesson Resources via REST API
- CVE-2023-31326 Information disclosure in AMD Instinct™ MI210
- CVE-2023-31325 Security feature bypass in AMD Radeon™ PRO W7000 Series Graphics Products
- CVE-2023-31324 Race condition in AMD Instinct™ MI210
- CVE-2023-31323 Memory corruption in AMD Instinct™ MI210
- CVE-2023-31322 Memory corruption in -AMD Radeon™ PRO W7000 Series Graphics Products
- CVE-2023-31320 Other in Radeon™ PRO W5000/W6000/W7000 Series Graphics Cards
- CVE-2023-3132 MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
- CVE-2023-31317 Memory corruption in AMD Instinct™ MI210
- CVE-2023-31316 Security feature bypass in AMD Instinct™ MI210