Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 352 of 430.
- CVE-2023-27210 SQL injection in online pizza ordering system project:online pizza ordering system
- CVE-2023-2721 Use after free in Chrome
- CVE-2023-27208 Cross-site scripting in online pizza ordering system project:online pizza ordering system
- CVE-2023-27207 SQL injection in online pizza ordering system project:online pizza ordering system
- CVE-2023-27206 Cross-site scripting in mayurik:best pos management system
- CVE-2023-27205 SQL injection in mayurik:best pos management system
- CVE-2023-27204 SQL injection in mayurik:best pos management system
- CVE-2023-27203 SQL injection in mayurik:best pos management system
- CVE-2023-27202 SQL injection in mayurik:best pos management system
- CVE-2023-27199 Security feature bypass in paxtechnology:pax a930 firmware
- CVE-2023-27198 Command injection in paxtechnology:pax a930 firmware
- CVE-2023-27197 Privilege escalation in paxtechnology:pax a930 firmware
- CVE-2023-27195 Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration
- CVE-2023-27193 Privilege escalation in dualspace:space clean \& super cleaner
- CVE-2023-27192 Denial of service in dualspace:super security
- CVE-2023-27191 Denial of service in dualspace:super security
- CVE-2023-2719 SupportCandy < 3.1.7 - Subscriber+ SQLi
- CVE-2023-27180 Information disclosure in gdidees:gdidees cms
- CVE-2023-2718 Contact Form Email < 1.3.38 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-27179 Path traversal in gdidees:gdidees cms
- CVE-2023-27178 File upload in gdidees:gdidees cms
- CVE-2023-27172 Weak cryptography in xpand-it:write-back manager
- CVE-2023-27170 Path traversal in xpand-it:write-back manager
- CVE-2023-2717 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Disable All Plugins
- CVE-2023-27169 Hardcoded credentials in xpand-it:write-back manager
- CVE-2023-27168 File upload in xpand-it:write-back manager
- CVE-2023-27167 SQL injection in supremainc:biostar 2
- CVE-2023-27164 File upload in halo:halo
- CVE-2023-27163 request-baskets vulnerable to Server-Side Request Forgery
- CVE-2023-27162 OpenAPI Generator vulnerable to Server-Side Request Forgery
- CVE-2023-27161 Server-side request forgery in jellyfin:jellyfin
- CVE-2023-27160 Server-side request forgery in forem:forem
- CVE-2023-2716 Groundhogg <= 2.7.9.8 - Missing Authorization to Non-Arbitrary File Upload
- CVE-2023-27159 Appwrite Server-Side Request Forgery vulnerability
- CVE-2023-27152 Auth bypass in opnsense:opnsense
- CVE-2023-27151 Cross-site scripting in opencrx:opencrx
- CVE-2023-27150 OpenCRX Cross-site Scripting vulnerability
- CVE-2023-2715 Groundhogg <= 2.7.9.8 - Missing Authorization to Admin Account and Ticket Creation
- CVE-2023-27149 Cross-site scripting in enhancesoft:osticket
- CVE-2023-27148 Cross-site scripting in enhancesoft:osticket
- CVE-2023-2714 Groundhogg <= 2.7.9.8 - Missing Authorization to Update License
- CVE-2023-27135 Command injection in totolink:a7100ru firmware
- CVE-2023-27133 Misconfiguration in tsplus:tsplus remote work
- CVE-2023-27132 Information disclosure in tsplus:tsplus remote work
- CVE-2023-27131 Cross-site scripting in typecho:typecho
- CVE-2023-27130 Cross-site scripting in typecho:typecho
- CVE-2023-2713 IDOR vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.
- CVE-2023-27126 Weak cryptography in tp-link:tapo c200 firmware
- CVE-2023-27121 Cross-site scripting in pleasantsolutions:pleasant password server
- CVE-2023-2712 Malicious File Upload vulnerability in "Rental Module" developed by third-party for Ideasoft's E-commerce Platform.
- CVE-2023-27119 Memory corruption in webassembly:wabt
- CVE-2023-27117 Memory corruption in webassembly:webassembly
- CVE-2023-27116 Denial of service in webassembly:webassembly
- CVE-2023-27115 Memory corruption in webassembly:webassembly
- CVE-2023-27114 Null dereference in radare:radare2
- CVE-2023-27113 SQL injection in a54552239:pearprojectapi
- CVE-2023-27112 SQL injection in a54552239:pearprojectapi
- CVE-2023-2711 Ultimate Product Catalog < 5.2.6 - Admin+ Stored XSS
- CVE-2023-27108 Missing authorization in kaiostech:kaios
- CVE-2023-27107 Missing authorization in myq-solution:central server
- CVE-2023-27105 Path traversal in shanling:eddict player
- CVE-2023-27103 Memory corruption in struktur:libde265
- CVE-2023-27102 Null dereference in struktur:libde265
- CVE-2023-27100 Security feature bypass in netgate:pfsense plus
- CVE-2023-2710 video carousel slider with lightbox <= 1.0.22 - Reflected Cross-Site Scripting
- CVE-2023-27098 Hardcoded credentials in tp-link:tapo
- CVE-2023-27096 Hippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module
- CVE-2023-27095 Exposure of Sensitive Information in OpenGoofy Hippo4j
- CVE-2023-27094 Hippo4j privilege escalation issue
- CVE-2023-27093 Cross-site scripting in my-blog project:my-blog
- CVE-2023-27092 Cross-site scripting in jbootfly project:jbootfly
- CVE-2023-27091 Auth bypass in teacms project:teacms
- CVE-2023-27090 Cross-site scripting in teacms project:teacms
- CVE-2023-2709 AN_GradeBook <= 5.0.1 - Admin+ XSS
- CVE-2023-27089 Cross-site scripting in ehuacui-bbs project:ehuacui-bbs
- CVE-2023-27088 Missing authorization in feiqu-opensource project:feiqu-opensource
- CVE-2023-27087 Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
- CVE-2023-27084 Information disclosure in iteachyou:dreamer cms
- CVE-2023-27083 File upload in pluck-cms:pluck
- CVE-2023-27082 Cross-site scripting in pluck-cms:pluck
- CVE-2023-2708 Video Gallery <= 1.0.10 - Reflected Cross-Site Scripting
- CVE-2023-27079 Command injection in tenda:g103 firmware
- CVE-2023-27078 Command injection in tp-link:tl-mr3020 firmware
- CVE-2023-27077 Memory corruption in 360:d901 firmware
- CVE-2023-27076 Command injection in tenda:g103 firmware
- CVE-2023-27075 Stored cross site scripting in Microbin
- CVE-2023-27074 SQL injection in phpgurukul:bp monitoring management system
- CVE-2023-27073 Cross-site request forgery in oretnom23:online food ordering system
- CVE-2023-27070 Cross-site scripting in totaljs:openplatform
- CVE-2023-2707 Appointment booking addon for Gravity Forms <= 1.9.5.1 - Admin+ Stored XSS
- CVE-2023-27069 Cross-site scripting in totaljs:openplatform
- CVE-2023-27068 Deserialization in sitecore:experience platform
- CVE-2023-27067 Path traversal in sitecore:experience platform
- CVE-2023-27066 Path traversal in sitecore:experience platform
- CVE-2023-27065 Memory corruption in tenda:w15e firmware
- CVE-2023-27064 Memory corruption in tenda:w15e firmware
- CVE-2023-27063 Memory corruption in tenda:w15e firmware
- CVE-2023-27062 Memory corruption in tenda:w15e firmware
- CVE-2023-27061 Memory corruption in tenda:w15e firmware
- CVE-2023-27060 Code injection in lightcms project:lightcms