Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 331 of 430.
- CVE-2023-29489 Cross-site scripting in cpanel:cpanel
- CVE-2023-29487 Denial of service in heimdalsecurity:thor
- CVE-2023-29486 Security feature bypass in heimdalsecurity:thor
- CVE-2023-29485 Security feature bypass in heimdalsecurity:thor
- CVE-2023-29484 Auth bypass in terminalfour:terminalfour
- CVE-2023-29483 Potential DoS via the Tudoor mechanism in eventlet and dnspython
- CVE-2023-29480 Information disclosure in ribose:rnp
- CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr
- CVE-2023-29479 Denial of service in ribose:rnp
- CVE-2023-29478 Path traversal in bibliocraftmod:bibliocraft
- CVE-2023-29476 In Menlo On-Premise Appliance before 2.88, web policy may not be consistently applied properly to intentionally malformed client requests.
- CVE-2023-29475 Command injection in atos:unify openscape 4000
- CVE-2023-29474 Command injection in atos:unify openscape 4000
- CVE-2023-29473 Command injection in atos:unify openscape 4000
- CVE-2023-29471 Lightbend Alpakka Kafka logs credentials on debug level
- CVE-2023-2947 Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2023-29469 Memory corruption in debian:debian linux
- CVE-2023-29468 Memory corruption in ti:wilink8-wifi-mcp8
- CVE-2023-29465 Other in sagemath:flintqs
- CVE-2023-29464 Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure
- CVE-2023-29463 Pavilion8 Security Misconfiguration Vulnerability
- CVE-2023-29462 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
- CVE-2023-29461 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
- CVE-2023-29460 Rockwell Automation Arena Simulation Software Remote Code Execution Vulnerability
- CVE-2023-2946 Improper Access Control in openemr/openemr
- CVE-2023-29459 Missing authorization in redbull:fc red bull salzburg
- CVE-2023-29458 Duktape 2.6 bug crashes JavaScript putting too many values in valstack.
- CVE-2023-29457 Insufficient validation of Action form input fields
- CVE-2023-29456 Inefficient URL schema validation
- CVE-2023-29455 Reflected XSS in several fields of graph form
- CVE-2023-29454 Persistent XSS in the user form
- CVE-2023-29453 Agent 2 package are built with Go version affected by CVE-2023-24538
- CVE-2023-29452 Remove possibility to add html into Geomap attribution field
- CVE-2023-29451 Denial of service caused by a bug in the JSON parser
- CVE-2023-29450 Unauthorized limited filesystem access from preprocessing
- CVE-2023-2945 Missing Authorization in openemr/openemr
- CVE-2023-29449 Limited control of resource utilization in JS preprocessing
- CVE-2023-29447 Insufficiently Protected Credentials in PTC's Kepware KEPServerEX
- CVE-2023-29446 Improper Input Validation in PTC's Kepware KEPServerEX
- CVE-2023-29445 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- CVE-2023-29444 Uncontrolled Search Path Element in PTC's Kepware KEPServerEX
- CVE-2023-29443 XML external entity in zohocorp:manageengine assetexplorer
- CVE-2023-29442 Cross-site scripting in zohocorp:manageengine applications manager
- CVE-2023-29441 WordPress WebLibrarian Plugin <= 3.5.8.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29440 WordPress Simple Job Board Plugin <= 2.10.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-2944 Improper Access Control in openemr/openemr
- CVE-2023-29439 WordPress FooGallery Plugin <= 2.2.35 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29438 WordPress SimpleModal Contact Form (SMCF) Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29437 WordPress Connections Business Directory Plugin <= 10.4.36 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29436 WordPress IFrame Shortcode Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29435 WordPress Cryptocurrency All-in-One Plugin <= 3.0.19 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29434 WordPress Optin Forms Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29433 WordPress tencentcloud-cos plugin <= 1.0.7 - Broken Access Control vulnerability
- CVE-2023-29432 WordPress Houzez Theme < 2.8.3 is vulnerable to SQL Injection
- CVE-2023-29431 WordPress qTranslate X Cleanup and WPML Import plugin <= 3.0.1 - Broken Access Control vulnerability
- CVE-2023-29430 WordPress TheRoof Theme <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2943 Code Injection in openemr/openemr
- CVE-2023-29429 WordPress User Registration plugin <= 2.3.2.1 - Broken Access Control vulnerability
- CVE-2023-29428 WordPress Superb Social Media Share Buttons and Follow Buttons Plugin <= 1.1.3 is vulnerable to Broken Access Control
- CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29426 WordPress Spreadshop Plugin Plugin <= 1.6.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-29425 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-29424 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29423 WordPress Cancel order request WooCommerce Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29422 WordPress Dynamics 365 Integration plugin <= 1.3.13 - Broken Access Control vulnerability
- CVE-2023-29421 Memory corruption in bzip3 project:bzip3
- CVE-2023-29420 Memory corruption in bzip3 project:bzip3
- CVE-2023-2942 Improper Input Validation in openemr/openemr
- CVE-2023-29419 Memory corruption in bzip3 project:bzip3
- CVE-2023-29418 Memory corruption in bzip3 project:bzip3
- CVE-2023-29417 Memory corruption in bzip3 project:bzip3
- CVE-2023-29416 Memory corruption in bzip3 project:bzip3
- CVE-2023-29415 Denial of service in bzip3 project:bzip3
- CVE-2023-29414 Memory corruption in Accutech Manager
- CVE-2023-29413 Missing authorization in APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
- CVE-2023-29412 Command injection in APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
- CVE-2023-29411 Auth bypass in APC Easy UPS Online Monitoring Software (Windows 10, 11 Windows Server 2016, 2019, 2022)
- CVE-2023-29410 Code injection in Conext Gateway
- CVE-2023-2941 Other in Chrome
- CVE-2023-29409 Large RSA keys can cause high CPU usage in crypto/tls
- CVE-2023-29408 Excessive resource consumption in golang.org/x/image/tiff
- CVE-2023-29407 Excessive CPU consumption when decoding 0-height images in golang.org/x/image/tiff
- CVE-2023-29406 Insufficient sanitization of Host header in net/http
- CVE-2023-29405 Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
- CVE-2023-29404 Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
- CVE-2023-29403 Unsafe behavior in setuid/setgid binaries in runtime
- CVE-2023-29402 Code injection via go command with cgo in cmd/go
- CVE-2023-29401 Improper handling of filenames in Content-Disposition HTTP header in github.com/gin-gonic/gin
- CVE-2023-29400 Improper handling of empty HTML attributes in html/template
- CVE-2023-2940 Security feature bypass in Chrome
- CVE-2023-2939 Privilege escalation in Chrome
- CVE-2023-29389 Auth bypass in toyota:rav4 firmware
- CVE-2023-29388 WordPress Product Catalog Simple Plugin <= 1.6.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29387 WordPress Manager for Icomoon Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29386 WordPress Manager for Icomoon plugin <= 2.0 - Arbitrary File Upload vulnerability
- CVE-2023-29385 WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29384 WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload
- CVE-2023-29383 Other in shadow project:shadow
- CVE-2023-29382 Code injection in zimbra:collaboration
- CVE-2023-29381 Privilege escalation in zimbra:collaboration