Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 347 of 430.
- CVE-2023-27793 Privilege escalation in ixpdata:easyinstall
- CVE-2023-27792 Privilege escalation in ixpdata:easyinstall
- CVE-2023-27791 Weak cryptography in ixpdata:easyinstall
- CVE-2023-2779 Super Socializer < 7.13.52 - Reflected XSS
- CVE-2023-27789 Denial of service in broadcom:tcpreplay
- CVE-2023-27788 Denial of service in broadcom:tcpreplay
- CVE-2023-27787 Null dereference in broadcom:tcpreplay
- CVE-2023-27786 Null dereference in broadcom:tcpreplay
- CVE-2023-27785 Null dereference in broadcom:tcpreplay
- CVE-2023-27784 Null dereference in broadcom:tcpreplay
- CVE-2023-27783 Denial of service in broadcom:tcpreplay
- CVE-2023-27781 Memory corruption in jpegoptim project:jpegoptim
- CVE-2023-2778 Rockwell Automation FactoryTalk Transaction Manager Vulnerable to Denial-Of-Service
- CVE-2023-27779 SQL injection in amsystem:am presencia
- CVE-2023-27777 Cross-site scripting in online jewelry shop project:online jewelry shop
- CVE-2023-27776 Cross-site scripting in online jewelry shop project:online jewelry shop
- CVE-2023-27775 Cross-site scripting in liveaction:livesp
- CVE-2023-27772 Memory corruption in mz-automation:libiec61850
- CVE-2023-27771 Other in wondershare:creative centerr
- CVE-2023-27770 Code injection in wondershare:edraw-max
- CVE-2023-27769 Other in wondershare:pdf reader
- CVE-2023-27768 Other in wondershare:pdfelement
- CVE-2023-27767 Code injection in wondershare:dr.fone
- CVE-2023-27766 Other in wondershare:anireel
- CVE-2023-27765 Other in wondershare:recoverit
- CVE-2023-27764 Code injection in wondershare:repairit
- CVE-2023-27763 Other in wondershare:mobiletrans
- CVE-2023-27762 Other in wondershare:democreator
- CVE-2023-27761 Other in wondershare:uniconverter
- CVE-2023-27760 Other in wondershare:filmora
- CVE-2023-2776 code-projects Simple Photo Gallery unrestricted upload
- CVE-2023-27759 Code injection in wondershare:edrawmind
- CVE-2023-27757 File upload in perfree:perfreeblog
- CVE-2023-27755 Path traversal in 71note:go-bbs
- CVE-2023-27754 Memory corruption in vox2mesh project:vox2mesh
- CVE-2023-27753 An arbitrary file upload vulnerability in MK-Auth 23.01K4.9 allows attackers to execute arbitrary code via uploading a crafted PHP file.
- CVE-2023-2775 code-projects Bus Dispatch and Information System adminHome.php sql injection
- CVE-2023-27748 Security feature bypass in blackvue:dr750-2ch ir lte firmware
- CVE-2023-27747 Missing authorization in blackvue:dr750-2ch ir lte firmware
- CVE-2023-27746 Weak cryptography in blackvue:dr750-2ch ir lte firmware
- CVE-2023-27745 Privilege escalation in southrivertech:titan ftp server nextgen
- CVE-2023-27744 Code injection in southrivertech:titan ftp server nextgen
- CVE-2023-27742 SQL injection in idurarapp:idurar
- CVE-2023-2774 code-projects Bus Dispatch and Information System view_branch.php sql injection
- CVE-2023-27739 Cross-site scripting in easyxdm:easyxdm
- CVE-2023-27734 Denial of service in edb-debugger project:edb-debugger
- CVE-2023-27733 SQL injection in dedecms:dedecms
- CVE-2023-27730 Memory corruption in f5:njs
- CVE-2023-2773 code-projects Bus Dispatch and Information System view_admin.php sql injection
- CVE-2023-27729 Memory corruption in f5:njs
- CVE-2023-27728 Memory corruption in f5:njs
- CVE-2023-27727 Memory corruption in f5:njs
- CVE-2023-27720 Memory corruption in dlink:dir-878 firmware
- CVE-2023-2772 SourceCodester Budget and Expense Tracker System GET Parameter manage_budget.php sql injection
- CVE-2023-27719 Memory corruption in dlink:dir878 firmware
- CVE-2023-27718 Memory corruption in dlink:dir878 firmware
- CVE-2023-27716 Privilege escalation in kafkaui-lite project:kafkaui-lite
- CVE-2023-27711 Cross-site scripting in typecho:typecho
- CVE-2023-2771 SourceCodester Online Exam System data sql injection
- CVE-2023-27709 SQL injection in dedecms:dedecms
- CVE-2023-27707 SQL injection in dedecms:dedecms
- CVE-2023-27706 Information disclosure in bitwarden:bitwarden
- CVE-2023-27705 Memory corruption in apng optimizer project:apng optimizer
- CVE-2023-27704 Denial of service in voidtools:everything
- CVE-2023-27703 Information disclosure in mypikpak:pikpak
- CVE-2023-27701 Missing authorization in muyucms:muyucms
- CVE-2023-27700 Path traversal in muyucms project:muyucms
- CVE-2023-2770 SourceCodester Online Exam System data sql injection
- CVE-2023-2769 SourceCodester Service Provider Management System sql injection
- CVE-2023-2768 Sucms cross site scripting
- CVE-2023-2767 Cross-site scripting in Iptanus File Upload
- CVE-2023-27667 SQL injection in auto dealer management system project:auto dealer management system
- CVE-2023-27666 Cross-site scripting in auto dealer management system project:auto dealer management system
- CVE-2023-2766 Weaver OA jx2_config.ini file access
- CVE-2023-27654 Privilege escalation in whoapp:who
- CVE-2023-27653 Denial of service in whoapp:who
- CVE-2023-27652 XML external entity in egostudiogroup:super clean
- CVE-2023-27651 Privilege escalation in egostudiogroup:super clean
- CVE-2023-27650 Code injection in apusapps:launcher
- CVE-2023-2765 Weaver OA downfile.php absolute path traversal
- CVE-2023-27649 SQL injection in bestools:trusted tools free music
- CVE-2023-27648 Path traversal in timmystudios:change color of keypad
- CVE-2023-27647 Information disclosure in dualspace:lock master
- CVE-2023-27645 Privilege escalation in powerampapp:poweramp
- CVE-2023-27643 Denial of service in powerampapp:poweramp
- CVE-2023-27641 Cross-site scripting in lsoft:listserv
- CVE-2023-27640 Path traversal in tshirtecommerce:custom product designer
- CVE-2023-2764 Draw Attention <= 2.0.11 - Missing Authorization to Arbitrary Post Featured Image Modification
- CVE-2023-27639 Path traversal in tshirtecommerce:custom product designer
- CVE-2023-27638 SQL injection in tshirtecommerce:custom product designer
- CVE-2023-27637 SQL injection in tshirtecommerce:custom product designer
- CVE-2023-27636 Cross-site scripting in progress:sitefinity
- CVE-2023-27635 Command injection in debian:debmany
- CVE-2023-27634 WordPress Intrepidity Theme <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27633 WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27632 WordPress Daily Prayer Time Plugin <= 2023.03.08 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27631 WordPress Daily Prayer Time Plugin <= 2023.05.04 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27630 WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure
- CVE-2023-2763 Memory corruption in SOLIDWORKS Desktop
- CVE-2023-27629 WordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)