Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 356 of 430.
- CVE-2023-2650 Possible DoS translating ASN.1 object identifiers
- CVE-2023-26498 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26497 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26496 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26495 Use after free in opendesign:drawings sdk
- CVE-2023-26494 lorawan-stack has open redirect vulnerability
- CVE-2023-26493 Command Injection in Cocos Engine workflow
- CVE-2023-26492 Directus vulnerable to Server-Side Request Forgery On File Import
- CVE-2023-26491 RSSHub is vulnerable to cross-site scripting (XSS) via unvalidated URL parameters
- CVE-2023-26490 mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync
- CVE-2023-2649 Tenda AC23 Service Port 7329 ate command injection
- CVE-2023-26489 Guest-controlled out-of-bounds read/write on x86_64 in wasmtime
- CVE-2023-26488 OpenZeppelin Contracts contains Incorrect Calculation
- CVE-2023-26487 Vega has cross-site scripting vulnerability in `lassoAppend` function
- CVE-2023-26486 Vega `scale` expression function cross site scripting
- CVE-2023-26485 Quadratic complexity may lead to a denial of service in cmark-gfm
- CVE-2023-26484 On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs
- CVE-2023-26483 gosaml2 vulnerable to Denial of Service via deflate decompression bomb
- CVE-2023-26482 Scope of workflow operations is not validated in nextcloud server
- CVE-2023-26481 Insufficient user check in FlowTokens by Email stage
- CVE-2023-26480 XWiki-Platform vulnerable to stored Cross-site Scripting via the HTML displayer in Live Data
- CVE-2023-2648 Weaver E-Office uploadify.php unrestricted upload
- CVE-2023-26479 org.xwiki.platform:xwiki-platform-rendering-parser vulnerable to Improper Handling of Exceptional Conditions
- CVE-2023-26478 org.xwiki.platform:xwiki-platform-store-filesystem-oldcore has Exposed Dangerous Method or Function
- CVE-2023-26477 org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
- CVE-2023-26476 Two XWiki Platform UIs Expose Sensitive Information to an Unauthorized Actor
- CVE-2023-26475 XWiki Platform vulnerable to Remote Code Execution in Annotations
- CVE-2023-26474 XWiki Platform vulnerable to privilege escalation via properties with wiki syntax that are executed with wrong author
- CVE-2023-26473 XWiki Platform allows unprivileged users to make arbitrary select queries using DatabaseListProperty and suggest.vm
- CVE-2023-26472 XWiki Platform vulnerable to privilege escalation via async macro and IconThemeSheet from the user profile
- CVE-2023-26471 XWiki Platform users may execute anything with superadmin right through comments and async macro
- CVE-2023-26470 In XWiki Platform, saving a document with a large object number leads to persistent OOM errors
- CVE-2023-2647 Weaver E-Office File Upload utility_all.php command injection
- CVE-2023-26469 Path traversal in jorani:jorani
- CVE-2023-26468 Missing authorization in cerebrate-project:cerebrate
- CVE-2023-26467 Security feature bypass in RPA: Synchronization Engine
- CVE-2023-26466 Missing authorization in RPA: Synchronization Engine
- CVE-2023-26465 Cross-site scripting in Pega Infinity
- CVE-2023-26464 Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender
- CVE-2023-26463 Use after free in strongswan:strongswan
- CVE-2023-26462 Hardcoded credentials in thingsboard:thingsboard
- CVE-2023-26461 XML External Entity (XXE) vulnerability in SAP NetWeaver (SAP Enterprise Portal)
- CVE-2023-26460 Improper Access Control in SAP NetWeaver AS Java (Cache Management Service)
- CVE-2023-2646 TP-Link Archer C7v2 GET Request Parameter denial of service
- CVE-2023-26459 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management
- CVE-2023-26457 Cross-Site Scripting (XSS) vulnerability in SAP Content Server
- CVE-2023-26456 Cross-site scripting in OX App Suite
- CVE-2023-26455 Missing authorization in OX App Suite
- CVE-2023-26454 SQL injection in OX App Suite
- CVE-2023-26453 SQL injection in OX App Suite
- CVE-2023-26452 SQL injection in OX App Suite
- CVE-2023-26451 Weak cryptography in OX App Suite
- CVE-2023-26450 Cross-site scripting in OX App Suite
- CVE-2023-2645 USR USR-G806 Web Management Page hard-coded password
- CVE-2023-26449 Cross-site scripting in OX App Suite
- CVE-2023-26448 Cross-site scripting in OX App Suite
- CVE-2023-26447 Cross-site scripting in OX App Suite
- CVE-2023-26446 Cross-site scripting in OX App Suite
- CVE-2023-26445 Cross-site scripting in OX App Suite
- CVE-2023-26443 SQL injection in OX App Suite
- CVE-2023-26442 Server-side request forgery in OX App Suite
- CVE-2023-26441 Path traversal in OX App Suite
- CVE-2023-26440 SQL injection in OX App Suite
- CVE-2023-2644 DigitalPersona FPSensor DpHost.exe unquoted search path
- CVE-2023-26439 SQL injection in OX App Suite
- CVE-2023-26438 Server-side request forgery in OX App Suite
- CVE-2023-26437 Deterred spoofing attempts can lead to authoritative servers being marked unavailable
- CVE-2023-26436 Deserialization in OX App Suite
- CVE-2023-26435 Server-side request forgery in OX App Suite
- CVE-2023-26434 Denial of service in OX App Suite
- CVE-2023-26433 Denial of service in OX App Suite
- CVE-2023-26432 Denial of service in OX App Suite
- CVE-2023-26431 Server-side request forgery in OX App Suite
- CVE-2023-26430 Command injection in OX App Suite
- CVE-2023-2643 SourceCodester File Tracker Manager System POST Parameter update_password.php sql injection
- CVE-2023-26429 Other in OX App Suite
- CVE-2023-26428 Missing authorization in OX App Suite
- CVE-2023-26427 Misconfiguration in OX App Suite
- CVE-2023-26426 Adobe Illustrator (Beta) has a UAF vulnerability when parsing SVG files Arbitrary code execution
- CVE-2023-26425 ZDI-CAN-19854: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-26424 ZDI-CAN-19833: Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26423 ZDI-CAN-20160: Adobe Acrobat Reader DC AcroForm insertItemAt Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26422 ZDI-CAN-20176: Adobe Acrobat Reader DC AcroForm deleteItemAt Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26421 ZDI-CAN-19832: Adobe Acrobat Reader DC Doc Object Integer Underflow Remote Code Execution Vulnerability
- CVE-2023-26420 ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-2642 SourceCodester Online Exam System GET Parameter updateCourse.php sql injection
- CVE-2023-26419 ZDI-CAN-20274: Adobe Acrobat Reader DC AcroForm removeField Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26418 ZDI-CAN-20311: Adobe Acrobat Reader DC AcroForm exportAsFDFStr Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26417 ZDI-CAN-20583: Adobe Acrobat Reader DC Popup Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26416 Memory corruption in Substance3D - Designer
- CVE-2023-26415 ZDI-CAN-20317: Adobe Substance 3D Designer DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-26414 ZDI-CAN-20316: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-26413 Memory corruption in Substance3D - Designer
- CVE-2023-26412 Memory corruption in Substance3D - Designer
- CVE-2023-26411 ZDI-CAN-20312: Adobe Substance 3D Designer USDC File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-26410 ZDI-CAN-20309: Adobe Substance 3D Designer USD File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-2641 SourceCodester Online Internship Management System POST Parameter login.php sql injection
- CVE-2023-26409 ZDI-CAN-20313: Adobe Substance 3D Designer USD File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-26408 ZDI-CAN-20712: AnnotsString Object prototype pollution Restrictions Bypass Vulnerability