Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 330 of 430.
- CVE-2023-29629 SQL injection in jmsthemelayout project:jmsthemelayout
- CVE-2023-29627 File upload in online pizza ordering project:online pizza ordering
- CVE-2023-29626 SQL injection in yoga class registration system project:yoga class registration system
- CVE-2023-29625 File upload in employee performance evaluation system project:employee performance evaluation system
- CVE-2023-29623 Cross-site scripting in purchase order management project:purchase order management
- CVE-2023-29622 SQL injection in purchase order management project:purchase order management
- CVE-2023-29621 File upload in purchase order management project:purchase order management
- CVE-2023-2962 SourceCodester Faculty Evaluation System sql injection
- CVE-2023-2961 Denial of service in advancecomp
- CVE-2023-2960 XSS in Oliva Expertise
- CVE-2023-29598 SQL injection in lmxcms:lmxcms
- CVE-2023-29597 SQL injection in bloofox:bloofoxcms
- CVE-2023-29596 Memory corruption in cmix project:cmix
- CVE-2023-2959 Authentication Bypass by Primary Weakness in Oliva Expertise
- CVE-2023-29586 Missing authorization in codesector:teracopy
- CVE-2023-29584 Memory corruption in mp4v2 project:mp4v2
- CVE-2023-29583 Memory corruption in yasm project:yasm
- CVE-2023-29582 Memory corruption in yasm project:yasm
- CVE-2023-29581 Memory corruption in yasm project:yasm
- CVE-2023-29580 Memory corruption in yasm project:yasm
- CVE-2023-2958 IDOR in ATS Pro
- CVE-2023-29579 Memory corruption in yasm project:yasm
- CVE-2023-29578 Memory corruption in mp4v2 project:mp4v2
- CVE-2023-29576 Memory corruption in axiosys:bento4
- CVE-2023-29575 Denial of service in axiosys:bento4
- CVE-2023-29574 Denial of service in axiosys:bento4
- CVE-2023-29573 Denial of service in axiosys:bento4
- CVE-2023-29571 Memory corruption in cesanta:mjs
- CVE-2023-29570 Null dereference in cesanta:mjs
- CVE-2023-2957 SQLi in Lisa Softwares Florist Site
- CVE-2023-29569 Null dereference in cesanta:mjs
- CVE-2023-29566 Remote code execution in dawnsparks-node-tesseract
- CVE-2023-29562 Memory corruption in tp-link:tl-wpa7510 firmware
- CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service
- CVE-2023-29551 Memory corruption in Firefox
- CVE-2023-29550 Memory corruption in Firefox
- CVE-2023-2955 SourceCodester Students Online Internship Timesheet System GET Parameter rendered_report.php sql injection
- CVE-2023-29549 Security feature bypass in Firefox
- CVE-2023-29548 Memory corruption in Firefox
- CVE-2023-29547 Security feature bypass in Firefox
- CVE-2023-29546 Information disclosure in Firefox for Android
- CVE-2023-29545 Other in Firefox
- CVE-2023-29544 Memory corruption in Firefox
- CVE-2023-29543 Use after free in Firefox
- CVE-2023-29542 Security feature bypass in Firefox
- CVE-2023-29541 Command injection in Firefox
- CVE-2023-29540 Security feature bypass in Firefox
- CVE-2023-2954 Cross-site Scripting (XSS) - Stored in liangliangyy/djangoblog
- CVE-2023-29539 Other in Firefox
- CVE-2023-29538 Information disclosure in Firefox
- CVE-2023-29537 Race condition in Firefox
- CVE-2023-29536 Use after free in Firefox
- CVE-2023-29535 Use after free in Firefox
- CVE-2023-29534 Other in Firefox for Android
- CVE-2023-29533 Security feature bypass in Firefox
- CVE-2023-29532 Race condition in Firefox
- CVE-2023-29531 Memory corruption in Firefox
- CVE-2023-29530 Laminas Diactoros vulnerable to HTTP Multiline Header Termination
- CVE-2023-2953 Null dereference in openldap
- CVE-2023-29529 matrix-js-sdk vulnerable to invisible eavesdropping in group calls
- CVE-2023-29528 Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
- CVE-2023-29527 Code injection from account through AWM view sheet in xwiki platform
- CVE-2023-29526 Async and display macro allow displaying and interacting with any document in restricted mode
- CVE-2023-29525 Privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration in xwiki-platform
- CVE-2023-29524 Code injection from account through XWiki.SchedulerJobSheet in xwiki-platform
- CVE-2023-29523 Code injection in display method used in user profiles in xwiki-platform
- CVE-2023-29522 Code injection from view right on XWiki.ClassSheet in xwiki-platform
- CVE-2023-29521 Code injection from account/view through VFS Tree macro in xwiki-platform
- CVE-2023-29520 Page render failure due to broken translations in xwiki-platform
- CVE-2023-2952 Denial of service in Wireshark
- CVE-2023-29519 Code injection in org.xwiki.platform:xwiki-platform-attachment-ui
- CVE-2023-29518 Code injection from view right using Invitation.InvitationCommon in xwiki-platform
- CVE-2023-29517 Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer
- CVE-2023-29516 Code injection from view right on XWiki.AttachmentSelector in xwiki-platform
- CVE-2023-29515 Cross-site scripting (XSS) in xwiki-platform
- CVE-2023-29514 Code injection in template provider administration in xwiki-platform
- CVE-2023-29513 Users can be created even when registration is disabled without validation via the template macro in xwiki-platform
- CVE-2023-29512 Code injection in xwiki-platform-web-templates
- CVE-2023-29511 xwiki-platform-administration-ui vulnerable to privilege escalation
- CVE-2023-29510 Code injection via unescaped translations in xwiki-platform
- CVE-2023-2951 code-projects Bus Dispatch and Information System delete_bus.php sql injection
- CVE-2023-29509 org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
- CVE-2023-29508 org.xwiki.platform:xwiki-platform-livedata-macro vulnerable to Cross-site Scripting
- CVE-2023-29507 org.xwiki.platform:xwiki-platform-oldcore makes Incorrect Use of Privileged APIs with DocumentAuthors
- CVE-2023-29506 org.xwiki.platform:xwiki-platform-security-authentication-default XSS with authenticated endpoints
- CVE-2023-29505 Cross-site request forgery in zohocorp:manageengine network configuration manager
- CVE-2023-29504 Privilege escalation in Intel(R) RealSense(TM) Dynamic Calibration software
- CVE-2023-29503 Memory corruption in Cscape
- CVE-2023-29502 PTC Vuforia Studio Path Traversal
- CVE-2023-29501 Weak cryptography in Jiyu Kukan Toku-Toku coupon App for iOS, and Jiyu Kukan Toku-Toku coupon App for Android
- CVE-2023-29500 Information disclosure in Intel(R) NUCs
- CVE-2023-2950 Improper Authorization in openemr/openemr
- CVE-2023-29499 Gvariant offset table entry size is not checked in is_normal()
- CVE-2023-29498 XML external entity in FRENIC RHC Loader
- CVE-2023-29497 Information disclosure in macOS
- CVE-2023-29495 Privilege escalation in Intel NUC BIOS firmware
- CVE-2023-29494 Privilege escalation in Intel(R) NUCs
- CVE-2023-29492 Novi Survey Insecure Deserialization
- CVE-2023-29491 Memory corruption in invisible-island:ncurses
- CVE-2023-2949 Cross-site Scripting (XSS) - Reflected in openemr/openemr