Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 319 of 430.
- CVE-2023-31191 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations
- CVE-2023-31190 Security feature bypass in ds230
- CVE-2023-3119 SourceCodester Service Provider Management System view.php sql injection
- CVE-2023-31189 Auth bypass in Intel(R) Server Product OpenBMC firmware
- CVE-2023-31188 Command injection in Archer C20
- CVE-2023-31187 Avaya IX Workforce Engagement - CWE-522: Insufficiently Protected Credentials
- CVE-2023-31186 Avaya IX Workforce Engagement - User Enumeration - CWE-204: Observable Response Discrepancy
- CVE-2023-31185 ROZCOM server framework
- CVE-2023-31184 ROZCOM client
- CVE-2023-31183 Cybonet PineApp Mail Secure RXSS vulnerability
- CVE-2023-31182 EasyTor Applications – Authorization Bypass
- CVE-2023-31181 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal
- CVE-2023-31180 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)
- CVE-2023-3118 Export All URLs < 4.6 - Reflected XSS
- CVE-2023-31179 AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal
- CVE-2023-31178 AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete
- CVE-2023-31177 Improper neutralizataion of input could lead to execution of arbitrary code
- CVE-2023-31176 Insufficient entropy vulnerability could lead to authentication bypass
- CVE-2023-31175 Execution with Unnecessary Privileges
- CVE-2023-31174 Cross-Site Request Forgery (CSRF)
- CVE-2023-31173 Use of Hard-coded Credentials
- CVE-2023-31172 Incomplete Filtering of Special Elements
- CVE-2023-31171 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
- CVE-2023-31170 Inclusion of Functionality from Untrusted Control Sphere
- CVE-2023-31169 Improper Handling of Unicode Encoding
- CVE-2023-31168 Inclusion of Functionality from Untrusted Control Sphere
- CVE-2023-31167 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CVE-2023-31166 Improper Limitation of a Pathname to a Restricted Directory
- CVE-2023-31165 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31164 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31163 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31162 Improper Input Validation in Web Interface
- CVE-2023-31161 Improper Input Validation in Web Interface
- CVE-2023-31160 Improper Neutralization of Input During Web Page Generation
- CVE-2023-3116 Liteos-A has a incorrect default permissions vulnerability
- CVE-2023-31159 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31158 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31157 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31156 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31155 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31154 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31153 Improper Neutralization of Input During Web Page Generation
- CVE-2023-31152 Authentication Bypass Using an Alternate Path or Channel
- CVE-2023-31151 Improper Certificate Validation
- CVE-2023-31150 Storing Passwords in a Recoverable Format
- CVE-2023-3115 Incorrect User Management in GitLab
- CVE-2023-31149 Improper Input Validation in Web Interface
- CVE-2023-31148 Improper Input Validation in Web Interface
- CVE-2023-31147 Insufficient randomness in generation of DNS query IDs in c-ares
- CVE-2023-31146 Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
- CVE-2023-31145 Reflected XSS vulnerability in CollaboraOnline
- CVE-2023-31144 Craft CMS vulnerable to cross site scripting in RSS feed widget
- CVE-2023-31143 Mage terminal user authentication not working properly
- CVE-2023-31142 Discourse's general category permissions could be set back to default
- CVE-2023-31141 OpenSearch issue with fine-grained access control during extremely rare race conditions
- CVE-2023-31140 OpenProject user sessions not terminated after activation of 2FA
- CVE-2023-3114 Terraform Enterprise Agent Pool Controls Allowed Unauthorized Workspaces To Target an Agent Pool
- CVE-2023-31139 DHIS2 Core unrestricted session cookies with Personal Access Tokens
- CVE-2023-31138 DHIS2 Core vulnerable to Improper Access Control with PATCH requests
- CVE-2023-31137 MaraDNS Integer Underflow Vulnerability in DNS Packet Decompression
- CVE-2023-31136 PostgresNIO processes unencrypted bytes from man-in-the-middle
- CVE-2023-31135 Dgraph Audit Log Encryption nonce reuse
- CVE-2023-31134 Tauri Open Redirect Vulnerability Possibly Exposes IPC to External Sites
- CVE-2023-31133 Ghost vulnerable to disclosure of private API fields
- CVE-2023-31132 Cacti Privilege Escalation
- CVE-2023-31131 Arbitrary File Write when Extracting Tarballs in greenplum-db
- CVE-2023-31130 Buffer Underwrite in ares_inet_net_pton()
- CVE-2023-3113 XML external entity in Lenovo XClarity Administrator
- CVE-2023-31129 Contiki-NG missing NULL pointer check in IPv6 neighbor discovery
- CVE-2023-31128 NextCloud Cookbook's pull-checks.yml workflow is vulnerable to OS Command Injection
- CVE-2023-31127 DMTF-2023-0001: SPDM mutual authentication bypass
- CVE-2023-31126 Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
- CVE-2023-31125 Uncaught exception in engine.io
- CVE-2023-31124 AutoTools does not set CARES_RANDOM_FILE during cross compilation
- CVE-2023-31123 effectindex/tripreporter vulnerable to improper password verification on POST `/api/v1/account/login`
- CVE-2023-31122 Apache HTTP Server: mod_macro buffer over-read
- CVE-2023-3112 Privilege escalation in AI Virtual Presence Sensor
- CVE-2023-31116 Misconfiguration in samsung:exynos 5123 firmware
- CVE-2023-31115 Other in samsung:exynos 5123 firmware
- CVE-2023-31114 Information disclosure in samsung:exynos 5123 firmware
- CVE-2023-3111 Use after free in Kernel
- CVE-2023-31103 Apache InLong: Attackers can change the immutable name and type of cluster
- CVE-2023-31102 Integer overflow in 7-zip:7-zip
- CVE-2023-31101 Apache InLong: Users who joined later can see the data of deleted users
- CVE-2023-31100 Missing authorization in SecureCore™ Technology™ 4
- CVE-2023-3110 Buffer overflow in S0 Decryption on Unify Gateway
- CVE-2023-31099 Code injection in zohocorp:manageengine opmanager
- CVE-2023-31098 Apache InLong: Weak Password Implementation in InLong
- CVE-2023-31096 Memory corruption in broadcom:lsi pci-sv92ex firmware
- CVE-2023-31095 WordPress Integration for Contact Form 7 HubSpot Plugin <= 1.2.8 is vulnerable to Open Redirection
- CVE-2023-31094 WordPress Stock Sync for WooCommerce Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31093 WordPress Chronosly Events Calendar Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31092 WordPress Easy Bet Plugin <= 1.0.2 is vulnerable to SQL Injection
- CVE-2023-31091 WordPress Dynamically Register Sidebars Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31090 WordPress Unlimited Elements For Elementor plugin <= 1.5.60 - Unrestricted Zip Extraction vulnerability
- CVE-2023-3109 Cross-site Scripting (XSS) - Stored in admidio/admidio
- CVE-2023-31089 WordPress Video XML Sitemap Generator Plugin <= 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31088 WordPress Floating Action Button Plugin <=1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31087 WordPress JS Job Manager Plugin <=2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31086 WordPress Simple Giveaways Plugin <= 2.46.0 is vulnerable to Cross Site Request Forgery (CSRF)