Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 329 of 430.
- CVE-2023-29818 Security feature bypass in webroot:secureanywhere
- CVE-2023-29815 Cross-site request forgery in chshcms:mccms
- CVE-2023-2981 Abstrium Pydio Cells Chat cross site scripting
- CVE-2023-29809 SQL injection in companymaps project:companymaps
- CVE-2023-29808 Cross-site scripting in companymaps project:companymaps
- CVE-2023-29805 Command injection in iodata:wfs-sr03k firmware
- CVE-2023-29804 Command injection in iodata:wfs-sr03k firmware
- CVE-2023-29803 Command injection in totolink:x18 firmware
- CVE-2023-29802 Command injection in totolink:x18 firmware
- CVE-2023-29801 Command injection in totolink:x18 firmware
- CVE-2023-29800 Command injection in totolink:x18 firmware
- CVE-2023-2980 Abstrium Pydio Cells User Creation resource injection
- CVE-2023-29799 Command injection in totolink:x18 firmware
- CVE-2023-29798 Command injection in totolink:x18 firmware
- CVE-2023-29791 Cross-site scripting in kodcloud:kodbox
- CVE-2023-29790 Information disclosure in kodcloud:kodbox
- CVE-2023-2979 Abstrium Pydio Cells User Creation access control
- CVE-2023-29780 Denial of service in 3reality:3rsb015bz firmware
- CVE-2023-2978 Abstrium Pydio Cells Change Subscription authorization
- CVE-2023-29779 Denial of service in sengled:e1e-g7f firmware
- CVE-2023-29778 Command injection in gl-inet:gl-mt3000 firmware
- CVE-2023-29774 Cross-site scripting in iteachyou:dreamer cms
- CVE-2023-29772 Cross-site scripting in asus:rt-ac51u firmware
- CVE-2023-29770 File upload in sapplica:sentrifugo
- CVE-2023-2977 Memory corruption in OpenSC
- CVE-2023-29767 Denial of service in appcrossx:crossx
- CVE-2023-29766 Privilege escalation in appcrossx:crossx
- CVE-2023-29761 Missing authorization in urbanandroid:sleep
- CVE-2023-2976 Use of temporary directory for file creation in `FileBackedOutputStream` in Guava
- CVE-2023-29759 Missing authorization in flightaware:flightaware
- CVE-2023-29758 Missing authorization in leap:blue light filter
- CVE-2023-29757 Privilege escalation in leap:blue light filter
- CVE-2023-29756 Denial of service in urbanandroid:twilight
- CVE-2023-29755 Privilege escalation in urbanandroid:twilight
- CVE-2023-29753 Denial of service in ekatox:facemoji\
- CVE-2023-29752 Privilege escalation in ekatox:facemoji emoji keyboard
- CVE-2023-29751 Denial of service in yandex:navigator
- CVE-2023-2975 AES-SIV implementation ignores empty associated data entries
- CVE-2023-29749 Privilege escalation in yandex:navigator
- CVE-2023-29748 Missing authorization in story saver for instagram - video downloader project:story saver for instagram - video downloader
- CVE-2023-29747 Missing authorization in story saver for instagram - video downloader project:story saver for instagram - video downloader
- CVE-2023-29746 Missing authorization in thethaiger:the thaiger
- CVE-2023-29745 Denial of service in bestweather project:bestweather
- CVE-2023-29743 Denial of service in bestweather project:bestweather
- CVE-2023-29742 Code injection in bestweather project:bestweather
- CVE-2023-29741 Privilege escalation in bestweather project:bestweather
- CVE-2023-29740 Missing authorization in amdroidapp:alarm clock for heavy sleepers
- CVE-2023-2974 quarkus-core vulnerable to client driven TLS cipher downgrading
- CVE-2023-29739 Privilege escalation in amdroidapp:alarm clock for heavy sleepers
- CVE-2023-29738 Privilege escalation in wavekeyboard:wave animated keyboard emoji
- CVE-2023-29737 Denial of service in wavekeyboard:wave animated keyboard emoji
- CVE-2023-29736 Path traversal in timmystudios:keyboard themes
- CVE-2023-29735 Denial of service in mwm:edjing mix
- CVE-2023-29734 Privilege escalation in mwm:edjing mix
- CVE-2023-29733 Missing authorization in dualspace:lock master
- CVE-2023-29732 Missing authorization in loka:solive
- CVE-2023-29731 Missing authorization in loka:solive
- CVE-2023-2973 SourceCodester Students Online Internship Timesheet Syste cross site scripting
- CVE-2023-29728 Privilege escalation in applika:call blocker
- CVE-2023-29727 Missing authorization in applika:call blocker
- CVE-2023-29726 Denial of service in applika:call blocker
- CVE-2023-29725 Missing authorization in bt21 x bts wallpaper project:bt21 x bts wallpaper
- CVE-2023-29724 Missing authorization in bt21 x bts wallpaper project:bt21 x bts wallpaper
- CVE-2023-29723 Missing authorization in glitter unicorn wallpaper project:glitter unicorn wallpaper
- CVE-2023-29722 Missing authorization in glitter unicorn wallpaper project:glitter unicorn wallpaper
- CVE-2023-29721 File upload in sofawiki project:sofawiki
- CVE-2023-29720 Cross-site scripting in sofawiki project:sofawiki
- CVE-2023-2972 Prototype Pollution in antfu/utils
- CVE-2023-29714 Cross-site scripting in vadesecure:secure gateway
- CVE-2023-29713 Cross-site scripting in vadesecure:secure gateway
- CVE-2023-29712 Cross-site scripting in vadesecure:secure gateway
- CVE-2023-29711 Auth bypass in interlink:psg-5124 firmware
- CVE-2023-2971 Typora Local File Disclosure
- CVE-2023-29709 Auth bypass in wildix:wsg24poe firmware
- CVE-2023-29708 Missing authorization in wavlink:wavrouter app
- CVE-2023-29707 Cross-site scripting in gbcom:lac web control center
- CVE-2023-2970 MindSpore json_helper.cc UpdateArray memory corruption
- CVE-2023-29696 Memory corruption in h3c:gr-1200w firmware
- CVE-2023-29693 Memory corruption in h3c:gr-1200w firmware
- CVE-2023-29689 PyroCMS remote code execution vulnerability
- CVE-2023-29681 Information disclosure in tenda:n301 firmware
- CVE-2023-29680 Information disclosure in tenda:n301 firmware
- CVE-2023-2968 Undefined variable usage in npm package "proxy" leads to remote denial of service
- CVE-2023-2967 TinyMCE Custom Styles < 1.1.4 - Admin+ Stored Cross-Site Scripting
- CVE-2023-29665 Memory corruption in dlink:dir-823g firmware
- CVE-2023-29659 libheif vulnerable to segmentation fault via floating point exception
- CVE-2023-29657 File upload in extplorer:extplorer
- CVE-2023-29656 Missing authorization in darktrace:threat visualizer
- CVE-2023-29643 Cross-site scripting in perfree:perfreeblog
- CVE-2023-29641 editor.md vulnerable to Cross-site Scripting
- CVE-2023-2964 Simple Iframe < 1.2.0 - Contributor+ Stored XSS
- CVE-2023-29639 Cross-site scripting in zhenfeng13:my blog
- CVE-2023-29638 Cross-site scripting in winterchen:my-site
- CVE-2023-29637 Cross-site scripting in qbian61 forum-java project:qbian61 forum-java
- CVE-2023-29636 Cross-site scripting in zhenfeng13:my blog
- CVE-2023-29635 File upload in antabot white-jotter project:antabot white-jotter
- CVE-2023-29632 SQL injection in joommasters:jmspagebuilder
- CVE-2023-29631 Missing authorization in joommasters:jms slider
- CVE-2023-29630 SQL injection in joommasters:jms drop mega menu
- CVE-2023-2963 SQLi in Oliva Expertise