Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 351 of 430.
- CVE-2023-2733 MStore API <= 3.9.0 - Authentication Bypass
- CVE-2023-27329 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-27328 Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
- CVE-2023-27327 Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27326 Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-27325 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27324 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27323 Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27322 Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27321 OPC Foundation UA .NET Standard ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2023-27320 Memory corruption in fedoraproject:fedora
- CVE-2023-2732 MStore API <= 3.9.2 - Authentication Bypass
- CVE-2023-27319 CVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator
- CVE-2023-27318 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale)
- CVE-2023-27317 Information Disclosure Vulnerability in ONTAP 9
- CVE-2023-27316 Privilege Escalation Vulnerability in SnapCenter
- CVE-2023-27315 Information Disclosure Vulnerability in SnapGathers
- CVE-2023-27314 Denial of Service Vulnerability in ONTAP 9
- CVE-2023-27313 Privilege Escalation Vulnerability in SnapCenter
- CVE-2023-27312 Privilege Escalation Vulnerability in SnapCenter Plugin for VMware vSphere
- CVE-2023-27311 Information disclosure in Information Disclosure Vulnerability in NetApp BlueXP Connector
- CVE-2023-27310 Missing authorization in RUGGEDCOM CROSSBOW
- CVE-2023-2731 Null dereference in libtiff
- CVE-2023-27309 Missing authorization in RUGGEDCOM CROSSBOW
- CVE-2023-27308 Memory corruption in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27307 Memory corruption in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27306 Denial of service in Intel(R) Optane(TM) SSD products
- CVE-2023-27305 Misconfiguration in Intel(R) Arc(TM) Control software
- CVE-2023-27304 Missing authorization in Cybozu Garoon
- CVE-2023-27303 Missing authorization in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27301 Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27300 Memory corruption in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-2730 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-27298 Privilege escalation in WULT software maintained by Intel(R)
- CVE-2023-27296 Apache InLong: JDBC Deserialization Vulnerability in InLong
- CVE-2023-27295 Cross-site request forgery in OpenCATS
- CVE-2023-27294 Cross-site scripting in OpenCATS
- CVE-2023-27293 Cross-site scripting in OpenCATS
- CVE-2023-27292 Open redirect in OpenCATS
- CVE-2023-27291 IBM Watson CP4D Data Stores information disclosure
- CVE-2023-27290 IBM Observability with Instana missing authentication
- CVE-2023-2729 Weak cryptography in DiskStation Manager (DSM)
- CVE-2023-27286 IBM Aspera code execution
- CVE-2023-27285 IBM Aspera buffer overflow
- CVE-2023-27284 IBM Aspera code execution
- CVE-2023-27283 IBM Aspera Orchestrator information disclosure
- CVE-2023-2728 Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin
- CVE-2023-27279 IBM Aspera Faspex denial of service
- CVE-2023-27272 IBM Aspera Console weak password requirements
- CVE-2023-27271 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform
- CVE-2023-27270 Denial of Service (DoS) in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-2727 Bypassing policies imposed by the ImagePolicyWebhook admission plugin
- CVE-2023-27269 Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-27268 Improper Access Control in SAP NetWeaver AS Java (Object Analyzing Service)
- CVE-2023-27267 Multiple vulnerabilities in SAP Diagnostics Agent (OSCommand Bridge)
- CVE-2023-27266 Disclosure of team owner email address when when accessing the teams API
- CVE-2023-27265 Disclosure of team owner email address when regenerating Invite ID
- CVE-2023-27264 IDOR: Updating a playbook via the Playbooks API
- CVE-2023-27263 IDOR: Accessing playbook runs via the Playbooks Runs API
- CVE-2023-27262 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-27261 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27260 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-2726 Security feature bypass in Chrome
- CVE-2023-27259 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27258 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27257 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27256 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27255 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-27254 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-27253 Command injection in netgate:pfsense
- CVE-2023-27250 SQL injection in online book store project project:online book store project
- CVE-2023-2725 Use after free in Chrome
- CVE-2023-27249 Memory corruption in swftools:swftools
- CVE-2023-27247 Security feature bypass in cynet:client agent
- CVE-2023-27246 File upload in mk-auth:mk-auth
- CVE-2023-27245 Cross-site scripting in file management system project:file management system
- CVE-2023-27243 Information disclosure in makves:dcap
- CVE-2023-27242 Cross-site scripting in razormist:loan management system
- CVE-2023-27241 Cross-site scripting in water billing system project:water billing system
- CVE-2023-27240 Command injection in tenda:ax3 firmware
- CVE-2023-2724 Memory corruption in Chrome
- CVE-2023-27239 Memory corruption in tenda:ax3 firmware
- CVE-2023-27238 LavaLite vulnerable to web cache poisoning
- CVE-2023-27237 LavaLite CMS vulnerable to host header injection attack
- CVE-2023-27235 File upload in jizhicms:jizhicms
- CVE-2023-27234 Cross-site request forgery in jizhicms:jizhicms
- CVE-2023-27233 SQL injection in piwigo:piwigo
- CVE-2023-27232 Command injection in totolink:a7100ru firmware
- CVE-2023-27231 Command injection in totolink:a7100ru firmware
- CVE-2023-2723 Use after free in Chrome
- CVE-2023-27229 Command injection in totolink:a7100ru firmware
- CVE-2023-27225 Cross-site scripting in user registration \& login and user management system with admin panel project:user registration \& login and user management system with admin panel
- CVE-2023-27224 Code injection in jc21:nginx proxy manager
- CVE-2023-2722 Use after free in Chrome
- CVE-2023-27217 Memory corruption in belkin:f7c063 firmware
- CVE-2023-27216 Command injection in dlink:dsl-3782 firmware
- CVE-2023-27214 SQL injection in online student management system project:online student management system
- CVE-2023-27213 SQL injection in online student management system project:online student management system
- CVE-2023-27212 Cross-site scripting in online pizza ordering system project:online pizza ordering system
- CVE-2023-27211 Cross-site scripting in online pizza ordering system project:online pizza ordering system