Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 343 of 430.
- CVE-2023-28218 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2023-28217 Windows Network Address Translation (NAT) Denial of Service Vulnerability
- CVE-2023-28216 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- CVE-2023-28215 Memory corruption in macOS
- CVE-2023-28214 Memory corruption in macOS
- CVE-2023-28213 Memory corruption in macOS
- CVE-2023-28212 Memory corruption in macOS
- CVE-2023-28211 Memory corruption in macOS
- CVE-2023-28210 Memory corruption in macOS
- CVE-2023-28209 Memory corruption in macOS
- CVE-2023-28208 Business logic in iOS and iPadOS
- CVE-2023-28207 Privilege escalation in macOS
- CVE-2023-28206 Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write
- CVE-2023-28205 Apple Multiple Products WebKit Use-After-Free
- CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read
- CVE-2023-28203 Information disclosure in Apple Music for Android
- CVE-2023-28202 Security feature bypass in iOS and iPadOS
- CVE-2023-28201 Race condition in Safari
- CVE-2023-28200 Information disclosure in iOS and iPadOS
- CVE-2023-2820 Information disclosure in Threat Response Auto Pull
- CVE-2023-28199 Memory corruption in macOS
- CVE-2023-28198 Use after free in iOS and iPadOS
- CVE-2023-28197 Security feature bypass in macOS
- CVE-2023-28195 Information disclosure in macOS
- CVE-2023-28194 Security feature bypass in iOS and iPadOS
- CVE-2023-28192 Information disclosure in macOS
- CVE-2023-28191 Security feature bypass in iOS and iPadOS
- CVE-2023-28190 Information disclosure in macOS
- CVE-2023-2819 Cross-site scripting in Threat Response Auto Pull
- CVE-2023-28189 Information disclosure in macOS
- CVE-2023-28188 Denial of service in macOS
- CVE-2023-28187 Denial of service in macOS
- CVE-2023-28185 Integer overflow in iOS and iPadOS
- CVE-2023-28182 Auth bypass in iOS and iPadOS
- CVE-2023-28181 Memory corruption in iOS and iPadOS
- CVE-2023-28180 Denial of service in macOS
- CVE-2023-2818 ITM Windows Agent Insecure Filesystem Permissions
- CVE-2023-28179 Memory corruption in macOS
- CVE-2023-28178 Security feature bypass in iOS and iPadOS
- CVE-2023-28177 Memory corruption in Firefox
- CVE-2023-28176 Memory corruption in Firefox
- CVE-2023-28175 Missing authorization in BVMS
- CVE-2023-28174 WordPress eRocket Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28173 WordPress Google XML Sitemap for Images Plugin <= 2.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28172 WordPress WP Google Map Plugin Plugin <= 4.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28171 WordPress Brilliance Theme <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28170 WordPress Theme Demo Import Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload
- CVE-2023-2817 Stored cross site scripting in Craft CMS
- CVE-2023-28169 WordPress Easy Event calendar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28168 WordPress WordPress Console plugin <= 0.3.9 - Broken Access Control vulnerability
- CVE-2023-28167 WordPress CF7 Invisible reCAPTCHA Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28166 WordPress Tags Cloud Manager Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28165 WordPress Backup Bank: WordPress Backup Plugin plugin <= 4.0.28 - Broken Access Control vulnerability
- CVE-2023-28164 Security feature bypass in Firefox
- CVE-2023-28163 Path traversal in Firefox
- CVE-2023-28162 Memory corruption in Firefox
- CVE-2023-28161 Security feature bypass in Firefox
- CVE-2023-28160 Information disclosure in Firefox
- CVE-2023-2816 Consul Envoy Extension Downsteam Proxy Configuration By Upstream Service Owner
- CVE-2023-28159 Other in Firefox
- CVE-2023-28158 Apache Archiva privilege escalation
- CVE-2023-28155 Server-Side Request Forgery in Request
- CVE-2023-28154 Cross-realm object access in Webpack 5
- CVE-2023-28153 Security feature bypass in kiddoware:kiddoware
- CVE-2023-28152 XML external entity in independentsoft:jword
- CVE-2023-28151 XML external entity in independentsoft:jspreadsheet
- CVE-2023-28150 XML external entity in independentsoft:jodf
- CVE-2023-2815 SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection
- CVE-2023-28149 An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 0
- CVE-2023-28148 Cross-site scripting in PRTG Network Monitor
- CVE-2023-28147 Use after free in arm:avalon gpu kernel driver
- CVE-2023-28144 Race condition in kdab:hotspot
- CVE-2023-28143 Local Privilege Escalation
- CVE-2023-28142 Race Condition
- CVE-2023-28141 NTFS Junction
- CVE-2023-28140 Executable Hijacking
- CVE-2023-2814 SourceCodester Class Scheduling System POST Parameter save_teacher.php cross site scripting
- CVE-2023-28134 Local Privliege Escalation in Check Point Endpoint Security Remediation Service
- CVE-2023-28133 Privilege escalation in Harmony Endpoint.
- CVE-2023-28131 Expo SDK has an OAuth vulnerability
- CVE-2023-28130 Command injection in Quantum Appliances, Quantum Security Gateways
- CVE-2023-2813 Multiple Themes - Reflected XSS
- CVE-2023-28129 Privilege escalation in Desktop & Server Management (DSM)
- CVE-2023-28128 File upload in Avalanche
- CVE-2023-28127 Path traversal in Avalanche
- CVE-2023-28126 Auth bypass in Avalanche
- CVE-2023-28125 Auth bypass in Avalanche
- CVE-2023-28124 Weak cryptography in UI Desktop for Windows
- CVE-2023-28123 Misconfiguration in UI Desktop for Windows
- CVE-2023-28122 Privilege escalation in UI Desktop for Windows
- CVE-2023-28121 Auth bypass in WooCommerce Payments WordPress Plugin
- CVE-2023-28120 Possible XSS Security Vulnerability in SafeBuffer#bytesplice
- CVE-2023-2812 Ultimate Dashboard < 3.7.6 - Admin+ Stored XSS
- CVE-2023-28119 crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
- CVE-2023-28118 kaml has potential denial of service while parsing input with anchors and aliases
- CVE-2023-28117 Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
- CVE-2023-28116 Buffer overflow in L2CAP due to misconfigured MTU
- CVE-2023-28115 Snappy vulnerable to PHAR deserialization, allowing remote code execution
- CVE-2023-28114 `cilium-cli` disables etcd authorization for clustermesh clusters
- CVE-2023-28113 russh may use insecure Diffie-Hellman keys