Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 328 of 430.
- CVE-2023-3005 SourceCodester Local Service Search Engine Management System POST Parameter cross site scripting
- CVE-2023-3004 SourceCodester Simple Chat System POST Parameter sql injection
- CVE-2023-3003 SourceCodester Train Station Ticketing System GET Parameter manage_prices.php sql injection
- CVE-2023-30024 Missing authorization in magicjack:a921 firmware
- CVE-2023-30019 imgproxy is vulnerable to Server-Side Request Forgery
- CVE-2023-30018 SQL injection in judging management system project:judging management system
- CVE-2023-30016 SQL injection in oretnom23:judging management system
- CVE-2023-30015 SQL injection in oretnom23:judging management system
- CVE-2023-30014 SQL injection in oretnom23:judging management system
- CVE-2023-30013 Command injection in totolink:x5000r firmware
- CVE-2023-3001 Deserialization in IGSS Dashboard (DashBoard.exe)
- CVE-2023-3000 SQLi in Erikoglu Technology's ErMon
- CVE-2023-29998 Cross-site scripting in gis3w:g3w-suite
- CVE-2023-29996 Null dereference in emqx:nanomq
- CVE-2023-29995 Memory corruption in emqx:nanomq
- CVE-2023-29994 Memory corruption in emqx:nanomq
- CVE-2023-2999 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-29986 Path traversal in spring-boot-actuator-logview project:spring-boot-actuator-logview
- CVE-2023-29985 SQL injection in oretnom23:student study center desk management system
- CVE-2023-29984 Null dereference in brother:dcp-1610w firmware
- CVE-2023-29983 Cross-site scripting in companymaps project:companymaps
- CVE-2023-2998 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-29975 Auth bypass in pfsense:pfsense
- CVE-2023-29974 Weak cryptography in pfsense:pfsense
- CVE-2023-29973 Denial of service in pfsense:pfsense
- CVE-2023-29963 Code injection in s-cms:s-cms
- CVE-2023-29962 Path traversal in s-cms:s-cms
- CVE-2023-29961 Memory corruption in dlink:dir-605l firmware
- CVE-2023-2996 Jetpack < 12.1.1 - Author+ Arbitrary File Manipulation via API
- CVE-2023-29950 Memory corruption in swftools:swftools
- CVE-2023-2995 Leyka < 3.30.4 - Admin+ Stored XSS
- CVE-2023-29944 Command injection in metersphere:metersphere
- CVE-2023-29942 Memory corruption in llvm:llvm
- CVE-2023-29941 Memory corruption in llvm:llvm
- CVE-2023-29939 Memory corruption in llvm:llvm
- CVE-2023-29935 Denial of service in llvm:llvm
- CVE-2023-29934 Memory corruption in llvm:llvm
- CVE-2023-29933 Memory corruption in llvm:llvm
- CVE-2023-29932 Memory corruption in llvm:llvm
- CVE-2023-29931 laravel-s vulnerable to Local File Inclusion
- CVE-2023-29930 File upload in genesys:tftp server
- CVE-2023-2993 Privilege escalation in Fan Power Controller (FPC)
- CVE-2023-29929 Buffer Overflow vulnerability found in Kemptechnologies Loadmaster before v.7.2.60.0 allows a remote attacker to casue a denial of service v
- CVE-2023-29927 Missing authorization in sage:sage 300
- CVE-2023-29926 PowerJob vulnerable to remote code execution
- CVE-2023-29924 PowerJob vulnerable to incorrect access control
- CVE-2023-29923 PowerJob vulnerable to Insecure Permissions
- CVE-2023-29922 PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
- CVE-2023-29921 PowerJob Incorrect Access Control vulnerability
- CVE-2023-2992 Denial of service in Fan Power Controller (FPC)
- CVE-2023-29919 Misconfiguration in contec:solarview compact firmware
- CVE-2023-29918 RosarioSIS vulnerable to CSV Injection
- CVE-2023-29917 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29916 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29915 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29914 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29913 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29912 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29911 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29910 Memory corruption in h3c:magic r200 firmware
- CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure
- CVE-2023-29909 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29908 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29907 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29906 Memory corruption in h3c:magic r200 firmware
- CVE-2023-29905 Memory corruption in h3c:magic r200 firmware
- CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service
- CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read
- CVE-2023-29887 Path traversal in nuovo:spreadsheet-reader
- CVE-2023-29881 SQL injection in phpok:phpok
- CVE-2023-2987 Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature
- CVE-2023-29868 Missing authorization in zammad:zammad
- CVE-2023-29867 Missing authorization in zammad:zammad
- CVE-2023-29863 SQL injection in medisys:weblab
- CVE-2023-29862 Code injection in agasio camera project:agasio camera firmware
- CVE-2023-29861 Code injection in flir:dvtel camera firmware
- CVE-2023-29860 Information disclosure in dtstack:taier
- CVE-2023-2986 Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass
- CVE-2023-29857 Information disclosure in teslamate:teslamate
- CVE-2023-29856 Memory corruption in dlink:dir-868l firmware
- CVE-2023-29855 Command injection in wbce:wbce cms
- CVE-2023-29854 Cross-site scripting in dircms project:dircms
- CVE-2023-29850 Information disclosure in slims:senayan library management system
- CVE-2023-2985 Use after free in Kernel
- CVE-2023-29849 SQL injection in hockeycomputindo:bang resto
- CVE-2023-29848 Cross-site scripting in hockeycomputindo:bang resto
- CVE-2023-29847 Cross-site scripting in aerocms project:aerocms
- CVE-2023-29842 SQL injection in churchcrm:churchcrm
- CVE-2023-2984 Path Traversal: '\..\filename' in pimcore/pimcore
- CVE-2023-29839 Cross-site scripting in digitaldruid:hoteldruid
- CVE-2023-29838 Privilege escalation in allwaysync:allwaysync
- CVE-2023-29837 Cross-site scripting in exelysis:exelysis unified communications solution
- CVE-2023-29836 Cross-site scripting in exelysis:exelysis unified communications solution
- CVE-2023-29835 Privilege escalation in wondershare:dr.fone
- CVE-2023-2983 Privilege Defined With Unsafe Actions in pimcore/pimcore
- CVE-2023-29827 Code injection in ejs:ejs
- CVE-2023-29824 Withdrawn: Use after free in SciPy
- CVE-2023-29820 Information disclosure in webroot:secureanywhere
- CVE-2023-2982 WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass
- CVE-2023-29819 Security feature bypass in webroot:secureanywhere