Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 321 of 430.
- CVE-2023-3097 KylinSoft kylin-software-properties setMainSource os command injection
- CVE-2023-30969 Palantir Tiles missing authentication on API endpoints
- CVE-2023-30968 Stored XSS in gaia
- CVE-2023-30967 Gotham Orbital Simulator path traversal
- CVE-2023-30963 Stored XSS in Foundry Slate Query Dropdown menu
- CVE-2023-30962 Stored XSS in cerberus attachments
- CVE-2023-30961 Palantir Gotham UI bug that could lead to incorrect data classification
- CVE-2023-30960 Insecure Direct Object Reference (IDOR) in Foundry job-tracker
- CVE-2023-3096 KylinSoft kylin-software-properties changedSource access control
- CVE-2023-30959 Stored XSS via javascript URI in Apollo Change Requests comment
- CVE-2023-30958 DOM XSS in Developer mode dashboard via redirect GET parameter
- CVE-2023-30956 IDOR in Foundry Comments allows retrieval of attachments
- CVE-2023-30955 Foundry workspace-server Developer Mode Authorization Bypass
- CVE-2023-30954 Gotham Video Broken Authentication
- CVE-2023-30952 Foundry Issues reporterPath phishing by parameter injection
- CVE-2023-30951 CVE-2023-30951
- CVE-2023-30950 CVE-2023-30950
- CVE-2023-3095 Improper Access Control in nilsteampassnet/teampass
- CVE-2023-30949 CVE-2023-30949
- CVE-2023-30948 Retrieval of Attachments to Comments lacks Authorization
- CVE-2023-30946 Issues notification metadata lacks authorization
- CVE-2023-30945 CVE-2023-30945
- CVE-2023-30944 Moodle: minor sql injection risk in external wiki method for listing pages
- CVE-2023-30943 Moodle: tinymce loaders susceptible to arbitrary folder creation
- CVE-2023-30942 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30941 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30940 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-3094 code-projects Agro-School Management System btn_functions.php doUpdateQuestion sql injection
- CVE-2023-30939 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30938 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30937 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30936 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30935 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30934 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30933 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30932 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30931 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30930 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-3093 YaySMTP <= 2.4.5 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2023-30929 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30928 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30927 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30926 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30925 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30924 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30923 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30922 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30921 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30920 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-3092 SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-30919 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30918 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30917 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30916 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30915 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30914 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30913 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30912 Code injection in HPE OneView
- CVE-2023-30911 Denial of service in HPE Integrated Lights-Out
- CVE-2023-30910 Other in HPE MSA Controller
- CVE-2023-3091 Captura CRYPTBASE.dll uncontrolled search path
- CVE-2023-30909 Auth bypass in HPE OneView
- CVE-2023-30908 Auth bypass in HPE OneView
- CVE-2023-30906 Privilege escalation in HPE Intelligent Provisioning (IP) for Gen9
- CVE-2023-30905 Misconfiguration in HPE MC990 X RMC firmware
- CVE-2023-30904 Hardcoded credentials in HPE Insight Remote Support
- CVE-2023-30903 Denial of service in HP-UX
- CVE-2023-30902 Privilege escalation in Trend Micro Apex One
- CVE-2023-30901 Cross-site request forgery in SICAM P850
- CVE-2023-30900 Memory corruption in Xpedition Layout Browser
- CVE-2023-3090 Out-of-bounds write in Linux kernel's ipvlan network driver
- CVE-2023-30899 Deserialization in Siveillance Video 2020 R2
- CVE-2023-30898 Deserialization in Siveillance Video 2020 R2
- CVE-2023-30897 Misconfiguration in SIMATIC WinCC
- CVE-2023-3089 Ocp & fips mode
- CVE-2023-3088 WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2023-30877 WordPress XML for Google Merchant Center Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30876 WordPress Dave's WordPress Live Search Plugin <= 4.8.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30875 WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30874 WordPress GPS Plotter Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30873 WordPress WP Docs plugin <= 1.9.8 - Broken Access Control
- CVE-2023-30872 WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection
- CVE-2023-30871 WordPress Stock Exporter for WooCommerce Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30870 Missing authorization in Sharkdropship for AliExpress Dropship and Affiliate
- CVE-2023-3087 FluentSMTP <= 2.2.4 - Unauthenticated Stored Cross-Site Scripting via Email Subject
- CVE-2023-30869 WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation
- CVE-2023-30868 WordPress CMS Tree Page View Plugin <= 1.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30867 Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerability
- CVE-2023-30866 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30865 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30864 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30863 Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000
- CVE-2023-30861 Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
- CVE-2023-30860 WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
- CVE-2023-3086 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
- CVE-2023-30859 Spigot Command Exploit in Triton
- CVE-2023-30858 Denosaurs emoji has ReDoS vulnerability in `replace` function
- CVE-2023-30857 @aedart/support possibly vulnerable to prototype pollution in metadata record, when using meta decorator
- CVE-2023-30856 eDEX-UI cross-site websocket hijacking vulnerability enables remote command execution
- CVE-2023-30855 Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php