Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 358 of 430.
- CVE-2023-2631 CSRF vulnerability and missing permission checks in Code Dx Plugin
- CVE-2023-26309 A remote code execution vulnerability in the webview component
- CVE-2023-26303 markdown-it-py crash on null assertions
- CVE-2023-26302 markdown-it-py CLI crash on invalid UTF-8 characters
- CVE-2023-26301 Missing authorization in HP LaserJet Pro
- CVE-2023-26300 Privilege escalation in HP PC products
- CVE-2023-2630 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-26299 Race condition in HP PC products using AMI UEFI Firmware
- CVE-2023-26298 Command injection in HP Device Manager
- CVE-2023-26297 Command injection in HP Device Manager
- CVE-2023-26296 Command injection in HP Device Manager
- CVE-2023-26295 Command injection in HP Device Manager
- CVE-2023-26294 Command injection in HP Device Manager
- CVE-2023-26293 Path traversal in Totally Integrated Automation Portal (TIA Portal) V15
- CVE-2023-26292 Cross-site scripting in Cloud Security Gateway (CSG)
- CVE-2023-26291 Cross-site scripting in Cloud Security Gateway (CSG)
- CVE-2023-26290 Cross-site scripting in Cloud Security Gateway (CSG)
- CVE-2023-2629 Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework
- CVE-2023-26289 IBM Aspera Orchestrator HTTP header injection
- CVE-2023-26288 IBM Aspera Orchestrator session fixation
- CVE-2023-26286 IBM AIX privilege escalation
- CVE-2023-26285 IBM MQ denial of service
- CVE-2023-26284 IBM MQ Certified Container improper access controls
- CVE-2023-26283 IBM WebSphere Application Server cross-site scripting
- CVE-2023-26282 IBM Watson CP4D Data Stores file modificiation
- CVE-2023-26281 IBM HTTP Server denial of service
- CVE-2023-26280 IBM Jazz Foundation improper access control
- CVE-2023-2628 KiviCare Management System < 3.2.1 - Multiple CSRF
- CVE-2023-26279 IBM QRadar WinCollect Agent improper output encoding
- CVE-2023-26278 IBM QRadar WinCollect Agent privilege escalation
- CVE-2023-26277 IBM QRadar WinCollect Agent privilege escalation
- CVE-2023-26276 IBM QRadar information disclosure
- CVE-2023-26274 IBM QRadar cross-site scripting
- CVE-2023-26273 IBM QRadar security bypass
- CVE-2023-26272 IBM Security Guardium Data Encryption information disclosure
- CVE-2023-26271 IBM Security Guardium Data Encryption information disclosure
- CVE-2023-26270 IBM Security Guardium Data Encryption code execution
- CVE-2023-2627 KiviCare Management System < 3.2.1 - Subscriber+ Unauthorised AJAX Calls
- CVE-2023-26269 Apache James server: Privilege escalation through unauthenticated JMX
- CVE-2023-26268 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes
- CVE-2023-26267 XML external entity in php-saml-sp project:php-saml-sp
- CVE-2023-26266 Code injection in afl\+\+ project:afl\+\+
- CVE-2023-26265 Path traversal in borg project:borg
- CVE-2023-26264 XML external entity in talend:data catalog
- CVE-2023-26263 XML external entity in talend:data catalog
- CVE-2023-26262 File upload in sitecore:experience manager
- CVE-2023-26261 Auth bypass in ubikasec:waap cloud
- CVE-2023-26260 Auth bypass in oxidforge:oxid eshop
- CVE-2023-2626 Authentication Bypass in OpenThread Boarder Router devices
- CVE-2023-26258 Auth bypass in arcserve:udp
- CVE-2023-26257 Denial of service in covesa:dlt-daemon
- CVE-2023-26256 Path traversal in stagil:stagil navigation
- CVE-2023-26255 Path traversal in stagil:stagil navigation
- CVE-2023-26253 Memory corruption in gluster:glusterfs
- CVE-2023-2625 Command injection in TXpert Hub CoreTec 4
- CVE-2023-26249 Denial of service in nic:knot resolver
- CVE-2023-26248 Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse
- CVE-2023-26246 Security feature bypass in hyundai:gen5w l firmware
- CVE-2023-26245 Security feature bypass in hyundai:gen5w l firmware
- CVE-2023-26244 Security feature bypass in hyundai:gen5w l firmware
- CVE-2023-26243 Information disclosure in hyundai:gen5w l firmware
- CVE-2023-26242 Integer overflow in linux:linux kernel
- CVE-2023-2624 KiviCare Management System < 3.2.1 - Reflected Cross-Site Scripting
- CVE-2023-26239 Auth bypass in watchguard:edr firmware
- CVE-2023-26238 Security feature bypass in watchguard:edr firmware
- CVE-2023-26237 Security feature bypass in watchguard:edr firmware
- CVE-2023-26236 Privilege escalation in watchguard:edr firmware
- CVE-2023-26235 Cross-site scripting in jd-gui project:jd-gui
- CVE-2023-26234 Deserialization in jd-gui project:jd-gui
- CVE-2023-2623 KiviCare Management System < 3.2.1 - Subscriber+ Sensitive Information Disclosure
- CVE-2023-26226 A use after free memory corruption issue exists in Yandex Browser for Desktop prior to version 24.4.0.682
- CVE-2023-26222 TIBCO EBX Cross-site Scripting (XXS) Vulnerability
- CVE-2023-26221 TIBCO Spotfire Insufficiently Protected Credential vulnerability
- CVE-2023-26220 TIBCO Spotfire Stored Cross-site Scripting (XSS) vulnerability
- CVE-2023-2622 Path traversal in MACH System Software
- CVE-2023-26219 TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
- CVE-2023-26218 TIBCO Nimbus Reflected Cross-site Scripting (XSS) vulnerabilities
- CVE-2023-26217 TIBCO EBX Add-ons SQL Injection Vulnerability
- CVE-2023-26216 TIBCO EBX Add-ons Arbitrary File Write
- CVE-2023-26215 TIBCO EBX® Add-ons Path Traversal
- CVE-2023-26214 TIBCO BusinessConnect Reflected XSS Vulnerability
- CVE-2023-26213 Command injection in barracuda:t100b firmware
- CVE-2023-26211 Cross-site scripting in FortiSOAR
- CVE-2023-26210 Command injection in FortiADC
- CVE-2023-2621 Path traversal in MACH System Software
- CVE-2023-26209 Denial of service in FortiDeceptor
- CVE-2023-26208 Denial of service in FortiAuthenticator
- CVE-2023-26207 Information disclosure in FortiOS
- CVE-2023-26206 Cross-site scripting in FortiNAC
- CVE-2023-26205 Privilege escalation in FortiADC
- CVE-2023-26204 Information disclosure in FortiSIEM
- CVE-2023-26203 Hardcoded credentials in FortiNAC
- CVE-2023-2620 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-2619 SourceCodester Online Tours & Travels Management System disapprove_delete.php exec sql injection
- CVE-2023-2618 OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leak
- CVE-2023-2617 OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference
- CVE-2023-2616 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-26159 Follow Redirects improperly handles URLs in the url.parse() function
- CVE-2023-26158 mockjs vulnerable to Prototype Pollution via the Util.extend function
- CVE-2023-26157 Memory corruption in libredwg