Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 344 of 430.
- CVE-2023-28112 Discourse's SSRF protection missing for some FastImage requests
- CVE-2023-28111 Discourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses
- CVE-2023-28110 JumpServer Koko vulnerable to Command Injection for Kubernetes Connection
- CVE-2023-2811 AI ChatBot < 4.5.6 - Admin+ Stored Cross-Site Scripting
- CVE-2023-28109 Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2023-28108 Pimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
- CVE-2023-28107 Discourse vulnerable to multisite DoS by spamming backups
- CVE-2023-28106 Pimcore vulnerable to Cross-site Scripting in UrlSlug Data type
- CVE-2023-28105 Go-huge-util vulnerable to path traversal when unzipping files
- CVE-2023-28104 silverstripe/graphql Denial of Service vulnerability
- CVE-2023-28103 Prototype pollution in matrix-react-sdk
- CVE-2023-28102 Command injection in discordrb
- CVE-2023-28101 Flatpak metadata with ANSI control codes can cause misleading terminal output
- CVE-2023-28100 TIOCLINUX can send commands outside sandbox if running on a virtual console
- CVE-2023-28099 OpenSIPS has vulnerability in the ds_is_in_list() function
- CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser
- CVE-2023-28097 OpenSIPS has vulnerability in the Content-Length Parser
- CVE-2023-28096 OpenSIPS has memory leak in cJSON lib
- CVE-2023-28095 OpenSIPS has vulnerability in the building the local negative replies
- CVE-2023-28094 Hardcoded credentials in Pega Platform
- CVE-2023-28093 Security feature bypass in RPA: Synchronization Engine
- CVE-2023-28092 Other in HPE ProLiant RL300 Gen11
- CVE-2023-28091 Information disclosure in HPE OneView
- CVE-2023-28090 Information disclosure in HPE OneView
- CVE-2023-2809 Use of Cleartext credentials in Sage 200 Spain
- CVE-2023-28089 Information disclosure in HPE OneView
- CVE-2023-28088 Information disclosure in HPE OneView
- CVE-2023-28087 Information disclosure in HPE OneView
- CVE-2023-28086 Information disclosure in HPE OneView
- CVE-2023-28085 Information disclosure in HPE OneView Global Dashboard
- CVE-2023-28084 HPE OneView and HPE OneView Global Dashboard appliance dumps may expose authentication tokens
- CVE-2023-28083 Cross-site scripting in Integrated Lights-Out
- CVE-2023-28081 Use after free in Hermes
- CVE-2023-28080 Privilege escalation in PowerPath Windows
- CVE-2023-2808 Lack of URL normalization allows rendering previews for disallowed domains
- CVE-2023-28079 Misconfiguration in PowerPath Windows
- CVE-2023-28078 Information disclosure in Dell SmartFabric OS10
- CVE-2023-28077 Information disclosure in Dell BSAFE SSL-J
- CVE-2023-28076 Weak cryptography in CloudLink
- CVE-2023-28075 Race condition in CPG BIOS
- CVE-2023-28074 Memory corruption in Dell BSAFE Crypto-C Micro Edition
- CVE-2023-28073 Auth bypass in CPG BIOS
- CVE-2023-28072 Deserialization in Alienware Command Center (AWCC)
- CVE-2023-28071 Other in Dell Command Update (DCU)
- CVE-2023-28070 Privilege escalation in Alienware Command Center (AWCC)
- CVE-2023-2807 Authentication bypass in password reset process
- CVE-2023-28069 Open redirect in Streaming Data Platform
- CVE-2023-28068 Privilege escalation in Dell Command Monitor (DCM)
- CVE-2023-28066 Privilege escalation in Dell OS Recovery Tool
- CVE-2023-28065 Privilege escalation in Dell Command Update (DCU)
- CVE-2023-28064 Memory corruption in CPG BIOS
- CVE-2023-28063 Integer overflow in CPG BIOS
- CVE-2023-28062 Missing authorization in PPDM Reporting (PowerProtect Data Manager)
- CVE-2023-28061 Other in CPG BIOS
- CVE-2023-28060 Other in CPG BIOS
- CVE-2023-2806 Weaver e-cology API RequestInfoByXml xml external entity reference
- CVE-2023-28059 Other in CPG BIOS
- CVE-2023-28058 Other in CPG BIOS
- CVE-2023-28056 Other in CPG BIOS
- CVE-2023-28055 Missing authorization in NetWorker
- CVE-2023-28054 Other in CPG BIOS
- CVE-2023-28053 Weak cryptography in NetWorker Virtual Edition
- CVE-2023-28052 Other in CPG BIOS
- CVE-2023-28051 Privilege escalation in Dell Power Manager (DPM)
- CVE-2023-28050 Other in CPG BIOS
- CVE-2023-2805 SupportCandy < 3.1.7 - Admin+ SQLi
- CVE-2023-28049 Privilege escalation in Dell Command Monitor (DCM)
- CVE-2023-28047 Privilege escalation in Dell Display Manager
- CVE-2023-28046 Privilege escalation in Dell Display Manager
- CVE-2023-28045 Information disclosure in CloudIQ Collector
- CVE-2023-28044 Other in CPG BIOS
- CVE-2023-28043 Weak cryptography in Secure Connect Gateway
- CVE-2023-28042 Other in CPG BIOS
- CVE-2023-28041 Other in CPG BIOS
- CVE-2023-28040 Other in CPG BIOS
- CVE-2023-2804 Memory corruption in libjpeg-turbo
- CVE-2023-28039 Other in CPG BIOS
- CVE-2023-28036 Other in CPG BIOS
- CVE-2023-28035 Other in CPG BIOS
- CVE-2023-28034 Other in CPG BIOS
- CVE-2023-28033 Other in CPG BIOS
- CVE-2023-28032 Other in CPG BIOS
- CVE-2023-28031 Other in CPG BIOS
- CVE-2023-28030 Other in CPG BIOS
- CVE-2023-2803 Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS
- CVE-2023-28029 Other in CPG BIOS
- CVE-2023-28028 Other in CPG BIOS
- CVE-2023-28027 Other in CPG BIOS
- CVE-2023-28026 Other in CPG BIOS
- CVE-2023-28025 An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management
- CVE-2023-28023 HCL BigFix WebUI Software Distribution is affected by a cross site server request forgery vulnerability
- CVE-2023-28022 HCL Connections is vulnerable to sensitive information disclosure
- CVE-2023-28021 BigFix WebUI is vulnerable to use of a risky cryptographic algorithm
- CVE-2023-28020 URL redirection affects BigFix WebUI
- CVE-2023-2802 Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS
- CVE-2023-28019 An SQL injection affects BigFix WebUI API
- CVE-2023-28018 HCL Connections s vulnerable to possible denial of service for certain users
- CVE-2023-28017 HCL Connections is vulnerable to cross-site scripting
- CVE-2023-28016 HCL BigFix OSD Bare Metal Server is affected by a host header injection vulnerability
- CVE-2023-28015 HCL Domino AppDev Pack is susceptible to a User Account Enumeration vulnerability