Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 326 of 430.
- CVE-2023-30431 IBM Db2 buffer overflow
- CVE-2023-30430 IBM Security Verify Access information disclosure
- CVE-2023-3043 Stack-based Buffer Overflow BMC
- CVE-2023-30429 Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy
- CVE-2023-30428 Apache Pulsar Broker: Incorrect Authorization Validation for Rest Producer
- CVE-2023-30421 Denial of service in mjson
- CVE-2023-3042 CNA SHORTNAME: dotCMSORG UUID: 5b9d93f2-25c7-46b4-ab60-d201718c9dd8
- CVE-2023-30417 Cross-site scripting in pearadmin:pear admin boot
- CVE-2023-30415 SQL injection in oretnom23:packers and movers management system
- CVE-2023-30414 Memory corruption in jerryscript:jerryscript
- CVE-2023-30410 Memory corruption in jerryscript:jerryscript
- CVE-2023-3041 Autochat <= 1.1.7- Unauthenticated Stored XSS
- CVE-2023-30408 Denial of service in jerryscript:jerryscript
- CVE-2023-30406 Denial of service in jerryscript:jerryscript
- CVE-2023-30405 Cross-site scripting in aigital:wireless-n repeater mini router firmware
- CVE-2023-30404 Code injection in aigital:wireless-n repeater mini router firmware
- CVE-2023-30403 Auth bypass in aigital:wireless-n repeater mini router firmware
- CVE-2023-30402 Memory corruption in yasm project:yasm
- CVE-2023-30400 Command injection in anyka:ak3918ev300 firmware
- CVE-2023-3040 Out of Bounds Access Leading to Undefined Behavior
- CVE-2023-30399 Other in garo:wallbox glb firmware
- CVE-2023-30394 Cross-site scripting in moveit:moveit
- CVE-2023-3039 Missing authorization in SD ROM Utility
- CVE-2023-30383 Memory corruption in tp-link:archer c20 firmware
- CVE-2023-30382 Memory corruption in valvesoftware:half-life
- CVE-2023-30380 Path traversal in dedecms:dedecms
- CVE-2023-3038 HelpDezk Community improper authorization
- CVE-2023-30378 Memory corruption in tenda:ac15 firmware
- CVE-2023-30376 Memory corruption in tenda:ac15 firmware
- CVE-2023-30375 Memory corruption in tenda:ac15 firmware
- CVE-2023-30373 Memory corruption in tenda:ac15 firmware
- CVE-2023-30372 Memory corruption in tenda:ac15 firmware
- CVE-2023-30371 Memory corruption in tenda:ac15 firmware
- CVE-2023-30370 Memory corruption in tenda:ac15 firmware
- CVE-2023-3037 HelpDezk Community improper authorization
- CVE-2023-30369 Memory corruption in tenda:ac15 firmware
- CVE-2023-30368 Memory corruption in tenda:ac5 firmware
- CVE-2023-30367 Information disclosure in mremoteng:mremoteng
- CVE-2023-30363 Prototype Pollution in vConsole
- CVE-2023-30362 Memory corruption in libcoap:libcoap
- CVE-2023-3036 Out of Bounds Slice index in cfnts leads to remote panic
- CVE-2023-30356 Security feature bypass in tenda:cp3 firmware
- CVE-2023-30354 Hardcoded credentials in tenda:cp3 firmware
- CVE-2023-30353 Command injection in tenda:cp3 firmware
- CVE-2023-30352 Hardcoded credentials in tenda:cp3 firmware
- CVE-2023-30351 Hardcoded credentials in tenda:cp3 firmware
- CVE-2023-30350 Privilege escalation in fs:s3900 24t4s firmware
- CVE-2023-3035 Guangdong Pythagorean OA Office System Schedule cross site scripting
- CVE-2023-30349 Remote code execution in JFinal CMS
- CVE-2023-30347 Cross-site scripting in stl:neox dial centre
- CVE-2023-3034 Reflected XSS in BKG Ntrip Professional Caster version <=2.0.44
- CVE-2023-30338 Cross-site scripting in emlog:emlog
- CVE-2023-30334 Cross-site scripting in asmbb project:asmbb
- CVE-2023-30333 File upload in perfree:perfreeblog
- CVE-2023-30331 Server-side template injection in beetl
- CVE-2023-30330 Path traversal in softexpert:excellence suite
- CVE-2023-3033 Mobatime web application - broken authorisation mechanisms
- CVE-2023-30328 Auth bypass in mailbutler:shimo
- CVE-2023-30326 Cross-site scripting in chatengine project:chatengine
- CVE-2023-30325 SQL injection in chatengine project:chatengine
- CVE-2023-30323 SQL injection in chatengine project:chatengine
- CVE-2023-30322 Cross-site scripting in chatengine project:chatengine
- CVE-2023-30321 Cross-site scripting in chatengine project:chatengine
- CVE-2023-30320 Cross-site scripting in chatengine project:chatengine
- CVE-2023-3032 Mobatime web application - Arbitrary file upload (RCE)
- CVE-2023-30319 Cross-site scripting in chatengine project:chatengine
- CVE-2023-30314 An issue discovered in 360 V6G, 360 T5G, 360 T6M, and 360 P1 routers allows attackers to hijack TCP sessions which could lead to a denial of service.
- CVE-2023-30313 An issue discovered in Wavlink QUANTUM D2G routers allows attackers to hijack TCP sessions which could lead to a denial of service.
- CVE-2023-30312 An issue discovered in OpenWrt 18.06, 19.07, 21.02, 22.03, and beyond allows off-path attackers to hijack TCP sessions, which could lead to
- CVE-2023-30311 An issue discovered in H3C Magic R365 and H3C Magic R100 routers allows attackers to hijack TCP sessions which could lead to a denial of service.
- CVE-2023-30310 An issue discovered in Comfast Comfast CF-616AC routers allows attackers to hijack TCP sessions which could lead to a denial of service.
- CVE-2023-3031 Prestahop module King-Avis - Path traversal
- CVE-2023-30309 Other in dlink:di-7003g firmware
- CVE-2023-30308 Other in ruijie:rg-eg105g firmware
- CVE-2023-30307 An issue discovered in TP-LINK TL-R473GP-AC, TP-LINK XDR6020, TP-LINK TL-R479GP-AC, TP-LINK TL-R4239G, TP-LINK TL-WAR1200L, and TP-LINK TL-R
- CVE-2023-30306 An issue discovered in Mercury x30g, Mercury YR1800XG routers allows attackers to hijack TCP sessions which could lead to a denial of service.
- CVE-2023-30305 Other in linksys:e5600 firmware
- CVE-2023-30300 Denial of service in w3:webassembly
- CVE-2023-30297 Code injection in n-able:n-central
- CVE-2023-3029 Guangdong Pythagorean OA Office System delete cross-site request forgery
- CVE-2023-30285 Information disclosure in deviniti:issue sync
- CVE-2023-30282 Missing authorization in prestashop:scexportcustomers
- CVE-2023-30281 Missing authorization in storecommander:scquickaccounting
- CVE-2023-30280 Memory corruption in netgear:r6700 firmware
- CVE-2023-3028 Improper backend communication allows access and manipulation of the telemetry data
- CVE-2023-3027 Privilege escalation in RHACM
- CVE-2023-30269 Other in cltphp:cltphp
- CVE-2023-30268 Path traversal in cltphp:cltphp
- CVE-2023-30267 Cross-site scripting in cltphp:cltphp
- CVE-2023-30266 File upload in cltphp:cltphp
- CVE-2023-30265 Path traversal in cltphp:cltphp
- CVE-2023-30264 File upload in cltphp:cltphp
- CVE-2023-30262 Deserialization in mimsoftware:mim concurrent license server
- CVE-2023-30261 Command injection in openwb:openwb
- CVE-2023-30260 RaspAP raspap-webgui Command Injection vulnerability
- CVE-2023-3026 Cross-site Scripting (XSS) - Stored in jgraph/drawio
- CVE-2023-30259 Memory corruption in librecad:librecad
- CVE-2023-30258 Command injection in magnussolution:magnusbilling
- CVE-2023-30257 Memory corruption in fiio:m6 firmware
- CVE-2023-30256 Cross-site scripting in webkul:qloapps