Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 346 of 430.
- CVE-2023-27919 Auth bypass in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)
- CVE-2023-27918 Cross-site scripting in Appointment and Event Booking Calendar for WordPress - Amelia
- CVE-2023-27917 Command injection in CONPROSYS IoT Gateway products
- CVE-2023-27916 Memory corruption in Cscape
- CVE-2023-27915 Memory corruption in Autodesk AutoCAD
- CVE-2023-27914 Memory corruption in Autodesk AutoCAD
- CVE-2023-27913 Integer overflow in Autodesk AutoCAD
- CVE-2023-27912 Memory corruption in Autodesk AutoCAD
- CVE-2023-27911 Memory corruption in Autodesk FBX SDK
- CVE-2023-27910 Memory corruption in Autodesk FBX SDK
- CVE-2023-2791 Playbooks lets you edit arbitrary posts
- CVE-2023-27909 Memory corruption in Autodesk FBX SDK
- CVE-2023-27908 Memory corruption in Autodesk installer
- CVE-2023-27907 Memory corruption in Autodesk Maya USD Plugin
- CVE-2023-27906 Memory corruption in Autodesk Maya USD Plugin
- CVE-2023-27905 Cross site scripting vulnerability in update-center2
- CVE-2023-27904 Information disclosure through error stack traces related to agents
- CVE-2023-27903 Incorrect Authorization in Jenkins Core
- CVE-2023-27902 Incorrect Permission Preservation in Jenkins Core
- CVE-2023-27901 Denial of service in Jenkins Core
- CVE-2023-27900 Denial of service in Jenkins Core
- CVE-2023-2790 TOTOLINK N200RE Telnet Service custom.conf password in configuration file
- CVE-2023-27899 Incorrect Authorization in Jenkins Core
- CVE-2023-27898 Cross-site Scripting vulnerability in Jenkins
- CVE-2023-27897 Code Injection vulnerability in SAP CRM
- CVE-2023-27896 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27895 Information Disclosure vulnerability in SAP Authenticator for Android
- CVE-2023-27894 Sensitive Information Disclosure in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27893 Arbitrary Code Execution in SAP Solution Manager and ABAP managed systems (ST-PI)
- CVE-2023-27892 Memory corruption in shapeshift:keepkey firmware
- CVE-2023-27891 Insufficient Session Expiration in pretix
- CVE-2023-27890 Cross-site scripting in export user project:export user
- CVE-2023-2789 GNU cflow parser.c parse_variable_declaration denial of service
- CVE-2023-27889 Cross-site request forgery in LIQUID SPEECH BALLOON
- CVE-2023-27888 Cross-site scripting in Joruri Gw
- CVE-2023-27887 Information disclosure in Intel(R) NUCs
- CVE-2023-27886 CVE-2023-27886
- CVE-2023-27882 Memory corruption in Cesium NET
- CVE-2023-27881 PTC Vuforia Studio Unrestricted Upload of File with Dangerous Type
- CVE-2023-2788 Deactivated user can retain access using oauth2 api
- CVE-2023-27879 Missing authorization in Intel(R) Optane(TM) SSD products
- CVE-2023-27877 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
- CVE-2023-27876 IBM TRIRIGA Application Platform XML external entity injection
- CVE-2023-27875 IBM Aspera Faspex improper access controls
- CVE-2023-27874 IBM Aspera Faspex XML external entity injection
- CVE-2023-27873 IBM Aspera Faspex information disclosure
- CVE-2023-27871 IBM Aspera Faspex information disclosure
- CVE-2023-27870 IBM Spectrum Virtualize information disclosure
- CVE-2023-2787 Collapsed Reply Threads APIs leak message contents from private channels
- CVE-2023-27869 IBM Db2 code execution
- CVE-2023-27868 IBM Db2 code execution
- CVE-2023-27867 IBM Db2 code execution
- CVE-2023-27866 IBM Informix JDBC code execution
- CVE-2023-27864 IBM Maximo Asset Management HTML injection
- CVE-2023-27863 IBM Spectrum Protect Plus Server information disclosure
- CVE-2023-27861 IBM Maximo Application Suite information disclosure
- CVE-2023-27860 IBM Maximo Asset Management information disclosure
- CVE-2023-2786 Channel commands execution doesn't properly verify permissions
- CVE-2023-27859 IBM Db2 code execution
- CVE-2023-27858 Rockwell Automation Arena® Simulation Uninitialized Pointer Vulnerability
- CVE-2023-27857 Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow
- CVE-2023-27856 Rockwell Automation ThinManager ThinServer Path Traversal Download
- CVE-2023-27855 Rockwell Automation ThinManager ThinServer Path Traversal Upload
- CVE-2023-27854 Rockwell Automation Arena® Simulation Out of Bounds Read Vulnerability
- CVE-2023-27853 Memory corruption in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-27852 Memory corruption in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-27851 File upload in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-27850 Path traversal in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-2785 Specially crafted search query can cause large log entries in postgres
- CVE-2023-27849 Command injection in rails-routes-to-json project:rails-routes-to-json
- CVE-2023-27848 Remote code execution in broccoli-compass
- CVE-2023-27847 SQL injection in xipblog project:xipblog
- CVE-2023-27846 SQL injection in themevolty:theme volty cms blog
- CVE-2023-27845 SQL injection in kerawen:omnichannel stocks
- CVE-2023-27844 SQL injection in litextension:leurlrewrite
- CVE-2023-27843 SQL injection in ask for a quote project:ask for a quote
- CVE-2023-27842 Misconfiguration in extplorer:extplorer
- CVE-2023-2784 Apps Framework allows install requests from regular members via an internal path
- CVE-2023-27837 Command injection in tp-link:tl-wpa8630p firmware
- CVE-2023-27836 Command injection in tp-link:tl-wpa8630p firmware
- CVE-2023-27830 Privilege escalation in tightvnc:tightvnc
- CVE-2023-2783 App Framework does not checks for the secret provided in the incoming webhook request
- CVE-2023-27826 Command injection in seowonintech:swc-5100w firmware
- CVE-2023-27823 Auth bypass in optoma:1080pstx
- CVE-2023-27821 Code injection in databasir:databasir
- CVE-2023-2782 Missing authorization in Acronis Cyber Infrastructure
- CVE-2023-27812 Path traversal in bloofox:bloofoxcms
- CVE-2023-27810 Memory corruption in h3c:magic r100 firmware
- CVE-2023-2781 User Email Verification for WooCommerce <= 3.5.0 - Authentication Bypass
- CVE-2023-27808 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27807 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27806 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27805 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27804 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27803 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27802 Memory corruption in h3c:magic r100 firmware
- CVE-2023-27801 Memory corruption in h3c:magic r100 firmware
- CVE-2023-2780 Path Traversal: '\..\filename' in mlflow/mlflow
- CVE-2023-27796 Command injection in ruijienetworks:rg-ew1200g pro firmware
- CVE-2023-27795 Weak cryptography in ixpdata:easyinstall