Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 334 of 430.
- CVE-2023-2916 InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
- CVE-2023-29159 Starlette has Path Traversal vulnerability in StaticFiles
- CVE-2023-29158 SUBNET PowerSYSTEM Center Authentication Bypass by Capture-replay
- CVE-2023-29157 Privilege escalation in Intel(R) OFU software
- CVE-2023-29156 Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations
- CVE-2023-29155 INEA ME RTU Missing Authentication for Critical Function
- CVE-2023-29154 SQL injection in CONPROSYS HMI System (CHS)
- CVE-2023-29153 Denial of service in Intel(R) SPS firmware
- CVE-2023-29152 PTC Vuforia Studio Improper Authorization
- CVE-2023-29151 Privilege escalation in Intel(R) PSR SDK
- CVE-2023-29150 CVE-2023-29150
- CVE-2023-2915 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerability
- CVE-2023-29147 Security feature bypass in malwarebytes:endpoint detection and response
- CVE-2023-29146 The utility functions used by Malwarebytes EDR 1.0.11 on Linux for calculating a cryptographic hash of data bytes truncate the hashed data if it exceeds 4GB.
- CVE-2023-29145 Security feature bypass in malwarebytes:endpoint detection and response
- CVE-2023-29144 Integer overflow in malwarebytes:malwarebytes
- CVE-2023-29141 X-Forwarded-For header allows brute-forcing autoblocked IP addresses
- CVE-2023-29140 Information disclosure in mediawiki:mediawiki
- CVE-2023-2914 Rockwell Automation ThinManager Thinserver Software Vulnerable to Input Validation Vulnerabilitiy
- CVE-2023-29139 Denial of service in mediawiki:mediawiki
- CVE-2023-29137 Information disclosure in mediawiki:mediawiki
- CVE-2023-29134 An issue was discovered in the Cargo extension for MediaWiki through 1.39.3.
- CVE-2023-29132 Use after free in irssi:irssi
- CVE-2023-29131 Misconfiguration in SIMATIC CN 4100
- CVE-2023-29130 Privilege escalation in SIMATIC CN 4100
- CVE-2023-2913 Rockwell Automation ThinManager ThinServer Path Traversal Vulnerability
- CVE-2023-29129 Auth bypass in Mendix SAML (Mendix 7 compatible)
- CVE-2023-29128 Path traversal in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29126 Insecure loose comparison in Enel X JuiceBox
- CVE-2023-29125 Heap overflow in CM_main.exe binary in Enel X JuiceBox
- CVE-2023-29122 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox
- CVE-2023-29121 Exposed TCF agent service in Enel X Juicebox
- CVE-2023-29120 Unauthorized Remote Command Execution in Enel X Juicebox
- CVE-2023-2912 SiteManager Embedded service disruption
- CVE-2023-29119 Unauthorized SQLite Injection
- CVE-2023-29118 Unauthorized SQLite Injection in Enel X Juicebox
- CVE-2023-29117 Authentication Bypass in JuiceBox Web Manager interface
- CVE-2023-29116 PHP Information Disclosure in Enel X JuiceBox
- CVE-2023-29115 Denial of Service via Web Management interface in Enel X JuiceBox
- CVE-2023-29114 Unauthorized System Log Disclosure in Enel X JuiceBox
- CVE-2023-29113 A lack of access control in custom IPC mechanism
- CVE-2023-29112 Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)
- CVE-2023-29111 Information Disclosure vulnerability in SAP Application Interface Framework (ODATA service)
- CVE-2023-29110 Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)
- CVE-2023-2911 Denial of service in BIND 9
- CVE-2023-29109 Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)
- CVE-2023-29108 IP filter vulnerability in ABAP Platform and SAP Web Dispatcher
- CVE-2023-29107 Information disclosure in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29106 Missing authorization in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29105 Denial of service in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29104 Path traversal in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29103 Hardcoded credentials in SIMATIC Cloud Connect 7 CC712
- CVE-2023-29102 WordPress Olive One Click Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
- CVE-2023-29101 WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29100 WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2910 A Command injection vulnerability was found on Printer service of ADM
- CVE-2023-29099 WordPress Divi Theme <= 4.20.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29098 WordPress CopySafe Web Protection Plugin <= 3.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29097 WordPress a3 Portfolio Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29096 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection
- CVE-2023-29095 WordPress RSVPMarker Plugin < 10.5.5 is vulnerable to SQL Injection
- CVE-2023-29094 WordPress Product page shipping calculator for WooCommerce Plugin <= 1.3.20 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29093 WordPress Conditional extra fees for woocommerce Plugin <= 1.0.96 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-29092 Other in samsung:exynos 1080 firmware
- CVE-2023-29091 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29090 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-2909 A Directory traversal vulnerability was found on EZ Sync service of ADM
- CVE-2023-29089 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29088 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29087 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29086 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29085 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-29084 Command injection in zohocorp:manageengine admanager plus
- CVE-2023-29081 InstallShield Symlink Vulnerability Affecting Suite Project Setups
- CVE-2023-29080 Privilege escalation in InstallShield
- CVE-2023-2908 Libtiff: null pointer dereference in tif_dir.c
- CVE-2023-29076 Memory corruption in AutoCAD, Advance Steel and Civil 3D
- CVE-2023-29075 Memory corruption in AutoCAD, Advance Steel and Civil 3D
- CVE-2023-29074 Memory corruption in AutoCAD, Advance Steel and Civil 3D
- CVE-2023-29073 Memory corruption in AutoCAD, Advance Steel and Civil 3D
- CVE-2023-2907 SQLi in Marksoft
- CVE-2023-29069 Privilege escalation in Desktop Connector
- CVE-2023-29068 Memory corruption in Autodesk products
- CVE-2023-29067 Memory corruption in Autodesk AutoCAD
- CVE-2023-29066 Incorrect User Management
- CVE-2023-29065 Overly Permissive Access Policy
- CVE-2023-29064 Hardcoded Secrets
- CVE-2023-29063 Lack of DMA Access Protections
- CVE-2023-29062 Unsecure Identity Verification
- CVE-2023-29061 Lack of Adequate BIOS Authentication
- CVE-2023-29060 Lack of USB Whitelisting
- CVE-2023-2906 Wireshark CP2179 divide by zero
- CVE-2023-29059 Supply chain in 3cx:3cx
- CVE-2023-29058 Missing authorization in XClarity Controller
- CVE-2023-29057 Privilege escalation in XClarity Controller
- CVE-2023-29056 Privilege escalation in XClarity Controller
- CVE-2023-29055 Apache Kylin: Insufficiently protected credentials in config file
- CVE-2023-29054 Weak cryptography in SCALANCE X200-4P IRT
- CVE-2023-29053 Memory corruption in JT Open
- CVE-2023-29052 Cross-site scripting in OX App Suite