Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 333 of 430.
- CVE-2023-29284 Memory corruption in Substance3D - Painter
- CVE-2023-29283 Memory corruption in Substance3D - Painter
- CVE-2023-29282 ZDI-CAN-20359: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-29281 ZDI-CAN-20364: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-29280 ZDI-CAN-20372: Adobe Substance 3D Painter PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-2928 DedeCMS article_allowurl_edit.php code injection
- CVE-2023-29279 ZDI-CAN-20368: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-29278 ZDI-CAN-20371: Adobe Substance 3D Painter GLTF File Parsing Uninitialized Variable Information Disclosure Vulnerability
- CVE-2023-29277 ZDI-CAN-20370: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-29276 ZDI-CAN-20362: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-29275 ZDI-CAN-20363: Adobe Substance 3D Painter USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-29274 ZDI-CAN-20366: Adobe Substance 3D Painter USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-29273 ZDI-CAN-20367: Adobe Substance 3D Painter USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-2927 JIZHICMS TemplateController.php index server-side request forgery
- CVE-2023-29268 TIBCO Spotfire Statistics Services Unrestricted File Upload Vulnerability
- CVE-2023-29267 IBM Db2 denial of service
- CVE-2023-29261 IBM Sterling Secure Proxy information disclosure
- CVE-2023-29260 IBM Sterling Connect:Express for UNIX server-side request forgery
- CVE-2023-2926 SeaCMS Picture Upload member.php denial of service
- CVE-2023-29259 IBM Sterling Connect:Express for UNIX information disclosure
- CVE-2023-29258 IBM Db2 denial of service
- CVE-2023-29257 IBM Db2 code execution
- CVE-2023-29256 IBM Db2 information disclosure
- CVE-2023-29255 IBM DB2 for Linux, UNIX and Windows denial of service
- CVE-2023-2925 Webkul krayin crm Edit Person Page 2 cross site scripting
- CVE-2023-29247 Stored XSS on Apache Airflow
- CVE-2023-29246 Apache OpenMeetings: allows null-byte Injection
- CVE-2023-29245 SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
- CVE-2023-29244 Misconfiguration in Intel Integrated Sensor Hub (ISH) driver for Windows 10 for Intel NUC P14E Laptop Element software installers
- CVE-2023-29243 Denial of service in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA
- CVE-2023-29242 Privilege escalation in Intel(R) oneAPI Toolkits
- CVE-2023-29241 Misconfiguration in BIS
- CVE-2023-29240 BIG-IQ iControl REST Vulnerability
- CVE-2023-2924 Supcon SimField reportupload.aspx unrestricted upload
- CVE-2023-29239 WordPress LuckyWP Scripts Control plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-29238 WordPress Whydonate – FREE Donate button Plugin <= 3.12.15 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-29237 WordPress Remove Duplicate Posts plugin <= 1.3.5 - Broken Access Control vulnerability
- CVE-2023-29236 WordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29235 WordPress Maintenance Switch Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-29234 Bypass serialize checks in Apache Dubbo
- CVE-2023-2923 Tenda AC6 fromDhcpListClient stack-based overflow
- CVE-2023-2922 SourceCodester Comment System GET Parameter index.php cross site scripting
- CVE-2023-29218 Business logic in twitter:recommendation algorithm
- CVE-2023-29216 Apache Linkis DatasourceManager module has a deserialization command execution
- CVE-2023-29215 Apache Linkis JDBC EngineCon has a deserialization command execution
- CVE-2023-29214 org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
- CVE-2023-29213 org.xwiki.platform:xwiki-platform-logging-ui Injection vulnerability
- CVE-2023-29212 xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
- CVE-2023-29211 org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
- CVE-2023-29210 org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
- CVE-2023-2921 Short URL <= 1.6.8 - Subscriber+ SQLi
- CVE-2023-29209 org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
- CVE-2023-29208 Data leak through deleted documents
- CVE-2023-29207 Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
- CVE-2023-29206 org.xwiki.platform:xwiki-platform-skin-skinx vulnerable to basic Cross-site Scripting by exploiting JSX or SSX plugins
- CVE-2023-29205 org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
- CVE-2023-29204 URL Redirection to Untrusted Site ('Open Redirect') in org.xwiki.platform:xwiki-platform-oldcore
- CVE-2023-29203 Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm
- CVE-2023-29202 org.xwiki.platform:xwiki-platform-rendering-macro-rss Cross-site Scripting vulnerability
- CVE-2023-29201 org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
- CVE-2023-29200 contao/core-bundle has path traversal vulnerability in the file manager
- CVE-2023-29199 vm2 Sandbox escape vulnerability
- CVE-2023-29198 Context isolation bypass via nested unserializable return value in Electron
- CVE-2023-29197 Improper header name validation in guzzlehttp/psr7
- CVE-2023-29196 HTML injection via topic embedding in Discourse
- CVE-2023-29195 Vitess VTAdmin users that can create shards can deny access to other functions
- CVE-2023-29194 vitess allows users to create keyspaces that can deny access to already existing keyspaces
- CVE-2023-29193 SpiceDB binding metrics port to untrusted networks and can leak command-line flags
- CVE-2023-29192 Missing authorization in silverwaregames-io-issue-tracker
- CVE-2023-2919 Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable'
- CVE-2023-29189 HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
- CVE-2023-29188 Cross-Site Scripting (XSS) vulnerability in SAP CRM WebClient UI
- CVE-2023-29187 DLL Hijacking vulnerability in SapSetup (Software Installation Program)
- CVE-2023-29186 Directory/Path Traversal vulnerability in SAP NetWeaver.
- CVE-2023-29185 Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)
- CVE-2023-29184 Other in FortiOS
- CVE-2023-29183 Cross-site scripting in FortiOS
- CVE-2023-29182 Memory corruption in FortiOS
- CVE-2023-29181 Memory corruption in FortiOS
- CVE-2023-29180 Null dereference in FortiOS
- CVE-2023-29179 Null dereference in FortiOS
- CVE-2023-29178 Memory corruption in FortiOS
- CVE-2023-29177 Memory corruption in FortiADC
- CVE-2023-29175 Security feature bypass in FortiOS
- CVE-2023-29174 WordPress SKU Label Changer For WooCommerce plugin <= 3.0 - Broken Access Control vulnerability
- CVE-2023-29173 WordPress Product Category Tree plugin <= 2.5 - Broken Access Control vulnerability
- CVE-2023-29172 WordPress PropertyHive Plugin <= 1.5.46 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29171 WordPress Magic Post Thumbnail Plugin <= 4.1.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29170 WordPress Product Enquiry for WooCommerce Plugin <= 2.2.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2917 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
- CVE-2023-29169 CVE-2023-29169
- CVE-2023-29168 PTC Vuforia Studio Insufficiently Protected Credentials
- CVE-2023-29167 Memory corruption in FRENIC RHC Loader
- CVE-2023-29166 Privilege escalation in Pro Video Formats
- CVE-2023-29165 Privilege escalation in Intel(R) Arc(TM) Control software
- CVE-2023-29164 Privilege escalation in Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP
- CVE-2023-29163 BIG-IP UDP Profile vulnerability
- CVE-2023-29162 Memory corruption in Intel(R) C++ Compiler Classic
- CVE-2023-29161 Privilege escalation in Intel(R) OFU software
- CVE-2023-29160 Memory corruption in FRENIC RHC Loader