Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 354 of 430.
- CVE-2023-26864 SQL injection in smplredirectionsmanager project:smplredirectionsmanager
- CVE-2023-26861 SQL injection in vivawallet:viva wallet
- CVE-2023-26860 SQL injection in save your carts and buy later or send it project:save your carts and buy later or send it
- CVE-2023-2686 Memory corruption in Gecko Platform
- CVE-2023-26859 SQL injection in brevo:brevo
- CVE-2023-26858 SQL injection in myprestamodules:frequently asked questions page
- CVE-2023-26857 File upload in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2023-26856 SQL injection in dynamic transaction queuing system project:dynamic transaction queuing system
- CVE-2023-26855 Weak cryptography in churchcrm:churchcrm
- CVE-2023-26852 File upload in textpattern:textpattern
- CVE-2023-2685 Unquoted Service Path in ABB AO-OPC
- CVE-2023-26848 Command injection in totolink:a7100ru firmware
- CVE-2023-26847 Cross-site scripting in opencats:opencats
- CVE-2023-26846 Cross-site scripting in opencats:opencats
- CVE-2023-26845 Cross-site request forgery in opencats:opencats
- CVE-2023-26843 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-26842 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-26841 Cross-site request forgery in churchcrm:churchcrm
- CVE-2023-26840 Cross-site request forgery in churchcrm:churchcrm
- CVE-2023-2684 File Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site Scripting
- CVE-2023-26839 Cross-site request forgery in churchcrm:churchcrm
- CVE-2023-26830 File upload in gladinet:centrestack
- CVE-2023-2683 Connection update while closing connection may lead to denial-of-service
- CVE-2023-26829 Auth bypass in gladinet:centrestack
- CVE-2023-26822 Command injection in dlink:go-rt-ac750 firmware
- CVE-2023-26820 Path traversal in siteproxy project:siteproxy
- CVE-2023-2682 Caton Live Mini_HTTPD ping.cgi command injection
- CVE-2023-26819 Denial of service in cJSON
- CVE-2023-26818 Security feature bypass in telegram:telegram
- CVE-2023-26817 Code injection in pgyer:codefever
- CVE-2023-26813 SQL injection in wang.market:wangmarket
- CVE-2023-2681 SQL Injection on Jorani
- CVE-2023-26806 Memory corruption in tenda:w20e firmware
- CVE-2023-26805 Memory corruption in tenda:w20e firmware
- CVE-2023-26802 Path traversal in dcnglobal:dcbi-netlog-lab firmware
- CVE-2023-26801 Command injection in lb-link:bl-ac1900 firmware
- CVE-2023-26800 Command injection in ruijienetworks:rg-ew1200 firmware
- CVE-2023-2680 Dma reentrancy issue (incomplete fix for cve-2021-3750)
- CVE-2023-26793 Memory corruption in libmodbus:libmodbus
- CVE-2023-2679 Data leakage in Adobe connector for SPE edition of SLM
- CVE-2023-26789 Cross-site scripting in veritas:netbackup opscenter
- CVE-2023-26788 Other in veritas:netbackup appliance firmware
- CVE-2023-26785 Code injection in mariadb:mariadb
- CVE-2023-26784 SQL injection in tosec:kirin fortress machine
- CVE-2023-26782 Code injection in chshcms:mccms
- CVE-2023-26781 SQL injection in chshcms:mccms
- CVE-2023-26780 SQL injection in yf-exam project:yf-exam
- CVE-2023-2678 SourceCodester File Tracker Manager System POST Parameter save_user.php cross site scripting
- CVE-2023-26779 Deserialization in yf-exam project:yf-exam
- CVE-2023-26777 Cross-site scripting in uptime kuma project:uptime kuma
- CVE-2023-26776 Cross-site scripting in monitorr:monitorr
- CVE-2023-26775 File upload in monitorr:monitorr
- CVE-2023-26774 Information disclosure in sales tracker management system project:sales tracker management system
- CVE-2023-26773 Cross-site scripting in sales tracker management system project:sales tracker management system
- CVE-2023-26771 Cross-site scripting in taskcafe project:taskcafe
- CVE-2023-26770 Auth bypass in taskcafe project:taskcafe
- CVE-2023-2677 SourceCodester Covid-19 Contact Tracing System manage.php sql injection
- CVE-2023-26769 Memory corruption in liblouis:liblouis
- CVE-2023-26768 Memory corruption in liblouis:liblouis
- CVE-2023-26767 Memory corruption in liblouis:liblouis
- CVE-2023-26762 File upload in smeup:erp
- CVE-2023-26760 Information disclosure in smeup:erp
- CVE-2023-2676 H3C R160 aspForm stack-based overflow
- CVE-2023-26759 Command injection in smeup:erp
- CVE-2023-26758 Path traversal in smeup:erp
- CVE-2023-26756 Auth bypass in revive:adserver
- CVE-2023-26750 SQL injection in yiiframework:yii
- CVE-2023-2675 Improper Restriction of Excessive Authentication Attempts in linagora/twake
- CVE-2023-2674 Improper Access Control in openemr/openemr
- CVE-2023-26735 Server-side request forgery in prometheus:blackbox exporter
- CVE-2023-26733 Memory corruption in tinytiff project:tinytiff
- CVE-2023-2673 PHOENIX CONTACT: FL/TC MGUARD prone to Improper Input Validation
- CVE-2023-2672 SourceCodester Lost and Found Information System GET Parameter view.php sql injection
- CVE-2023-2671 SourceCodester Lost and Found Information System Contact Form cross site scripting
- CVE-2023-2670 SourceCodester Lost and Found Information System access control
- CVE-2023-26692 Cross-site scripting in zcbs:zbbs
- CVE-2023-26691 Path traversal in cs-cart:cs-cart multivendor
- CVE-2023-26690 File upload in cs-cart:cs-cart multivendor
- CVE-2023-2669 SourceCodester Lost and Found Information System GET Parameter sql injection
- CVE-2023-26689 Missing authorization in cs-cart:cs-cart multivendor
- CVE-2023-26688 Cross-site scripting in cs-cart:cs-cart multivendor
- CVE-2023-26687 Path traversal in cs-cart:cs-cart multivendor
- CVE-2023-26686 File upload in cs-cart:cs-cart multivendor
- CVE-2023-2668 SourceCodester Lost and Found Information System GET Parameter manager_category sql injection
- CVE-2023-2667 SourceCodester Lost and Found Information System cross site scripting
- CVE-2023-2666 Allocation of Resources Without Limits or Throttling in froxlor/froxlor
- CVE-2023-2665 Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis
- CVE-2023-2664 Stack overflow in Xpdf 4.04 due to object loop in PDF embedded file tree
- CVE-2023-2663 Stack overflow in Xpdf 4.04 due to object loop in PDF page label tree
- CVE-2023-2662 Divide-by-zero in Xpdf 4.04 due to bad color space object
- CVE-2023-26616 Memory corruption in dlink:dir-823g firmware
- CVE-2023-26615 Auth bypass in dlink:dir-823g firmware
- CVE-2023-26613 Command injection in dlink:dir-823g firmware
- CVE-2023-26612 Memory corruption in dlink:dir-823g firmware
- CVE-2023-2661 SourceCodester Online Computer and Laptop Store Master.php sql injection
- CVE-2023-26609 Command injection in abus:tvip 20000-21150 firmware
- CVE-2023-26608 Cross-site scripting in vxcontrol:soldr
- CVE-2023-26607 Memory corruption in linux:linux kernel
- CVE-2023-26606 Use after free in linux:linux kernel
- CVE-2023-26605 Use after free in linux:linux kernel