Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 353 of 430.
- CVE-2023-2706 OTP Login Woocommerce & Gravity Forms <= 2.2 - Authentication Bypass to Privilege Escalation
- CVE-2023-27059 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-27055 Path traversal in aver:ptzapp 2
- CVE-2023-27054 Cross-site scripting in mirotalk:mirotalk p2p
- CVE-2023-27052 SQL injection in moosikay project:moosikay
- CVE-2023-2705 Appointment booking addon for Gravity Forms < 1.10.0 - Reflected Cross-Site Scripting
- CVE-2023-27043 Security feature bypass in fedoraproject:fedora
- CVE-2023-27042 Memory corruption in tenda:ax3 firmware
- CVE-2023-27041 SQL injection in school registration and fee system project:school registration and fee system
- CVE-2023-27040 Code injection in simple image gallery web app project:simple image gallery web app
- CVE-2023-2704 BP Social Connect <= 1.5 - Authentication Bypass
- CVE-2023-27037 SQL injection in qibosoft:qibocms
- CVE-2023-27035 Security feature bypass in obsidian:obsidian
- CVE-2023-27034 SQL injection in joommasters:jms blog
- CVE-2023-27033 Code injection in cdesigner project:cdesigner
- CVE-2023-27032 SQL injection in idnovate:popup module \(on entering\, exit popup\, add product\) and newsletter
- CVE-2023-2703 Information Disclosure in Finex Media's Competition Management System
- CVE-2023-27025 RuoYi vulnerable to arbitrary file download
- CVE-2023-27021 Memory corruption in tenda:ac10 firmware
- CVE-2023-27020 Memory corruption in tenda:ac10 firmware
- CVE-2023-2702 IDOR in Finex Media's Competition Management System
- CVE-2023-27019 Memory corruption in tenda:ac10 firmware
- CVE-2023-27018 Memory corruption in tenda:ac10 firmware
- CVE-2023-27017 Memory corruption in tenda:ac10 firmware
- CVE-2023-27016 Memory corruption in tenda:ac10 firmware
- CVE-2023-27015 Memory corruption in tenda:ac10 firmware
- CVE-2023-27014 Memory corruption in tenda:ac10 firmware
- CVE-2023-27013 Memory corruption in tenda:ac10 firmware
- CVE-2023-27012 Memory corruption in tenda:ac10 firmware
- CVE-2023-27010 Privilege escalation in wondershare:dr.fone
- CVE-2023-2701 Gravity Forms < 2.7.5 - Reflected XSS
- CVE-2023-27008 Cross-site scripting in atutor:atutor
- CVE-2023-27001 Auth bypass in egerie:egerie
- CVE-2023-27000 Cross-site scripting in netscout:ngeniusone
- CVE-2023-2700 Denial of service in libvirt
- CVE-2023-26999 XML external entity in netscout:ngeniusone
- CVE-2023-26998 Cross-site scripting in netscout:ngeniusone
- CVE-2023-26991 Use after free in swftools:swftools
- CVE-2023-2699 SourceCodester Lost and Found Information System GET Parameter sql injection
- CVE-2023-26987 Missing authorization in konga project:konga
- CVE-2023-26986 Command injection in chinamobileltd:oa mailbox pc
- CVE-2023-26984 Missing authorization in peppermint:peppermint
- CVE-2023-26982 Cross-site scripting in trudesk project:trudesk
- CVE-2023-26980 Race condition in pax:paydroid
- CVE-2023-2698 SourceCodester Lost and Found Information System GET Parameter sql injection
- CVE-2023-26979 Security feature bypass in bluetens:bluetensq
- CVE-2023-26978 Command injection in totolink:a7100ru firmware
- CVE-2023-26976 Memory corruption in tenda:ac6 firmware
- CVE-2023-26974 Memory corruption in irfanview:irfanview
- CVE-2023-2697 SourceCodester Online Exam System POST Parameter data sql injection
- CVE-2023-26969 Path traversal in atrocore:atropim
- CVE-2023-26968 File upload in atrocore:atrocore
- CVE-2023-26966 Memory corruption in libtiff:libtiff
- CVE-2023-26965 Use after free in libtiff:libtiff
- CVE-2023-26964 h2 vulnerable to denial of service
- CVE-2023-26961 File upload in alteryx:alteryx server
- CVE-2023-2696 SourceCodester Online Exam System POST Parameter data sql injection
- CVE-2023-26959 SQL injection in phpgurukul:park ticketing management system
- CVE-2023-26958 Cross-site scripting in phpgurukul:park ticketing management system
- CVE-2023-26957 Missing authorization in onekeyadmin:onekeyadmin
- CVE-2023-26956 Path traversal in onekeyadmin:onekeyadmin
- CVE-2023-26955 Cross-site scripting in onekeyadmin project:onekeyadmin
- CVE-2023-26954 Cross-site scripting in onekeyadmin project:onekeyadmin
- CVE-2023-26953 Cross-site scripting in onekeyadmin:onekeyadmin
- CVE-2023-26952 Cross-site scripting in onekeyadmin:onekeyadmin
- CVE-2023-26951 Cross-site scripting in onekeyadmin:onekeyadmin
- CVE-2023-26950 Cross-site scripting in onekeyadmin:onekeyadmin
- CVE-2023-2695 SourceCodester Online Exam System POST Parameter data sql injection
- CVE-2023-26949 File upload in onekeyadmin:onekeyadmin
- CVE-2023-26948 Path traversal in onekeyadmin:onekeyadmin
- CVE-2023-26943 Weak cryptography in assaabloy:yale keyless smart lock firmware
- CVE-2023-26942 Weak cryptography in assaabloy:yale ia-210 firmware
- CVE-2023-26941 Weak cryptography in assaabloy:yale conexis l1 firmware
- CVE-2023-2694 SourceCodester Online Exam System POST Parameter data sql injection
- CVE-2023-26930 Memory corruption in xpdfreader:xpdf
- CVE-2023-2693 SourceCodester Online Exam System POST Parameter data sql injection
- CVE-2023-26925 Information disclosure in dlink:dir-882 firmware
- CVE-2023-26924 Memory corruption in llvm:llvm
- CVE-2023-26923 Memory corruption in musescore:musescore
- CVE-2023-26922 SQL injection in variscite:matrix-gui
- CVE-2023-26921 Command injection in quectel:ag550qcn firmware
- CVE-2023-26920 Code injection in naturalintelligence:fast xml parser
- CVE-2023-2692 SourceCodester ICT Laboratory Management System GET Parameter room_info.php cross site scripting
- CVE-2023-26919 Security feature bypass in javadelight:nashorn sandbox
- CVE-2023-26918 Misconfiguration in filereplicationpro:file replication pro
- CVE-2023-26917 Null dereference in cesnet:libyang
- CVE-2023-26916 Null dereference in cesnet:libyang
- CVE-2023-26913 Cross-site scripting in evolucare:ecs imaging
- CVE-2023-26912 Cross-site scripting in s-mall-ssm project:s-mall-ssm
- CVE-2023-26911 Privilege escalation in asus:armoury crate
- CVE-2023-2691 SourceCodester Personnel Property Equipment System POST Parameter add_item.php cross site scripting
- CVE-2023-26905 SQL injection in alphaware - simple e-commerce system project:alphaware - simple e-commerce system
- CVE-2023-2690 SourceCodester Personnel Property Equipment System GET Parameter returned_reuse_form.php sql injection
- CVE-2023-2689 SourceCodester Billing Management System GET Parameter editproduct.php sql injection
- CVE-2023-2688 WordPress File Upload / WordPress File Upload Pro <= 4.19.1 - Authenticated (Administrator+) Path Traversal
- CVE-2023-26877 File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to th
- CVE-2023-26876 SQL injection in piwigo:piwigo
- CVE-2023-2687 Memory corruption in Gecko SDK
- CVE-2023-26866 Command injection in greenpacket:ot-235 firmware
- CVE-2023-26865 SQL injection in brandsdistribution:bdroppy