Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 327 of 430.
- CVE-2023-30253 Dolibarr vulnerable to remote code execution via uppercase manipulation
- CVE-2023-3025 Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
- CVE-2023-30247 File upload in storage unit rental management system project:storage unit rental management system
- CVE-2023-30246 SQL injection in judging management system project:judging management system
- CVE-2023-30245 SQL injection in judging management system project:judging management system
- CVE-2023-30243 SQL injection in netentsec:application security gateway
- CVE-2023-30242 SQL injection in netentsec:application security gateway
- CVE-2023-3024 Bluetooth LE segmented 'prepare write response' packet may lead to out-of-bounds memory access
- CVE-2023-30237 Code injection in cyberghostvpn:cyberghost
- CVE-2023-3023 WP EasyCart <= 5.4.10 - Authenticated (Administrator+) SQL Injection via 'orderby'
- CVE-2023-30226 Denial of service in rizin:rizin
- CVE-2023-30223 Auth bypass in 4d:server
- CVE-2023-30222 Information disclosure in 4d:server
- CVE-2023-3022 Memory corruption in Linux Kernel (IPv6)
- CVE-2023-30216 Missing authorization in newbee-mall project:newbee-mall
- CVE-2023-30212 Cross-site scripting in ourphp:ourphp
- CVE-2023-30211 SQL injection in ourphp:ourphp
- CVE-2023-30210 Cross-site scripting in ourphp:ourphp
- CVE-2023-3021 Cross-site Scripting (XSS) - Stored in mkucej/i-librarian-free
- CVE-2023-30207 Denial of service in kodi:kodi
- CVE-2023-30205 Cross-site scripting in douphp:douphp
- CVE-2023-30204 SQL injection in judging management system project:judging management system
- CVE-2023-30203 SQL injection in judging management system project:judging management system
- CVE-2023-30200 Path traversal in advancedplugins:ultimateimagetool
- CVE-2023-3020 Cross-site Scripting (XSS) - Reflected in mkucej/i-librarian-free
- CVE-2023-30199 Path traversal in webbax:customexporter
- CVE-2023-30198 Path traversal in webbax:winbizpayment
- CVE-2023-30197 Path traversal in webbax:myinventory
- CVE-2023-30196 Path traversal in webbax:salesbooster
- CVE-2023-30195 Missing authorization in lineagrafica:lgdetailedorder
- CVE-2023-30194 SQL injection in prestashop:poststaticfooter
- CVE-2023-30192 SQL injection in prestashop:possearchproducts
- CVE-2023-30191 SQL injection in cdesigner project:cdesigner
- CVE-2023-3019 Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
- CVE-2023-30189 SQL injection in posthemes:posstaticblocks
- CVE-2023-30188 Denial of service in onlyoffice:document server
- CVE-2023-30187 Memory corruption in onlyoffice:document server
- CVE-2023-30186 Use after free in onlyoffice:document server
- CVE-2023-30185 File upload in crmeb:crmeb
- CVE-2023-30184 Cross-site scripting in typecho:typecho
- CVE-2023-3018 SourceCodester Lost and Found Information System access control
- CVE-2023-30179 Code injection in craftcms:craft cms
- CVE-2023-30177 Cross Site Scripting in CraftCMS
- CVE-2023-30172 mflow vulnerable to directory traversal
- CVE-2023-3017 SourceCodester Lost and Found Information System Manage User Page cross site scripting
- CVE-2023-3016 yiwent Vip Video Analysis admincore.php cross site scripting
- CVE-2023-30154 SQL injection in shoprunners:aftermail
- CVE-2023-30153 SQL injection in prestashop:payplug
- CVE-2023-30151 SQL injection in boxtal:envoimoinscher
- CVE-2023-30150 SQL injection in leotheme:leocustomajax
- CVE-2023-3015 yiwent Vip Video Analysis title.php server-side request forgery
- CVE-2023-30149 SQL injection in ebewe:city autocomplete
- CVE-2023-30148 Cross-site scripting in store-opart:multi html block
- CVE-2023-30146 Information disclosure in assmann:ht-ip211hdp firmware
- CVE-2023-30145 Server-Side Template Injection in Camaleon CMS
- CVE-2023-3014 BeipyVideoResolution admincore.php cross site scripting
- CVE-2023-30135 Command injection in tenda:ac18 firmware
- CVE-2023-30132 Hardcoded credentials in ixpdata:easyinstall
- CVE-2023-30131 Code injection in ixpdata:easyinstall
- CVE-2023-30130 CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
- CVE-2023-3013 Unchecked Return Value in gpac/gpac
- CVE-2023-30125 Cross-site scripting in eyoucms:eyoucms
- CVE-2023-30124 LavaLite vulnerable to Cross Site Scripting
- CVE-2023-30123 Cross-site scripting in wuzhicms:wuzhicms
- CVE-2023-30122 File upload in oretnom23:online food ordering system
- CVE-2023-3012 NULL Pointer Dereference in gpac/gpac
- CVE-2023-30112 SQL injection in medicine tracker system project:medicine tracker system
- CVE-2023-30111 Cross-site scripting in medicine tracker system project:medicine tracker system
- CVE-2023-3011 ARMember <= 4.0.5 - Cross-Site Request Forgery
- CVE-2023-30106 Cross-site scripting in medicine tracker system project:medicine tracker system
- CVE-2023-3010 Cross-site scripting in worldmap-panel
- CVE-2023-30097 Cross-site scripting in totaljs:messenger
- CVE-2023-30096 Cross-site scripting in totaljs:messenger
- CVE-2023-30095 Cross-site scripting in totaljs:messenger
- CVE-2023-30094 Cross-site scripting in TotalJS
- CVE-2023-30093 ONOS vulnerable to Cross-site Scripting
- CVE-2023-30092 SQL injection in online pizza ordering system project:online pizza ordering system
- CVE-2023-30090 File upload in sem-cms:semcms
- CVE-2023-3009 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
- CVE-2023-30088 Memory corruption in cesanta:mjs
- CVE-2023-30087 Memory corruption in cesanta:mjs
- CVE-2023-30086 Memory corruption in libtiff:libtiff
- CVE-2023-30085 Memory corruption in libming:libming
- CVE-2023-30084 Memory corruption in libming:libming
- CVE-2023-30083 Memory corruption in libming:libming
- CVE-2023-30082 Denial of service in enhancesoft:osticket
- CVE-2023-3008 ningzichun Student Management System login.php sql injection
- CVE-2023-30077 SQL injection in judging management system project:judging management system
- CVE-2023-30076 SQL injection in judging management system project:judging management system
- CVE-2023-3007 ningzichun Student Management System Password Reset resetPassword.php password recovery
- CVE-2023-30065 Command injection in mitrastar:gpt-2741gnac-n2 firmware
- CVE-2023-30063 Auth bypass in dlink:dir-890l firmware
- CVE-2023-30061 Auth bypass in dlink:dir-879 firmware
- CVE-2023-3006 Information disclosure in Kernel
- CVE-2023-30059 An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation
- CVE-2023-30058 SQL injection in xxyopen:novel-plus
- CVE-2023-30057 Cross-site scripting in fico:origination manager decision
- CVE-2023-30056 Auth bypass in fico:origination manager decision
- CVE-2023-30054 Command injection in totolink:a7100ru firmware
- CVE-2023-30053 Command injection in totolink:a7100ru firmware