Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 359 of 430.
- CVE-2023-26156 chromedriver Command Injection vulnerability
- CVE-2023-26155 node-qpdf vulnerable to command injection
- CVE-2023-26154 pubnub Insufficient Entropy vulnerability
- CVE-2023-26153 geokit-rails Command Injection vulnerability
- CVE-2023-26152 static-server Path Traversal vulnerability
- CVE-2023-26151 asyncua vulnerable to denial of service via infinite loop
- CVE-2023-26150 asyncua Improper Authentication vulnerability
- CVE-2023-2615 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-26149 quill-mention Cross-site Scripting vulnerability
- CVE-2023-26148 Other in ithewei/libhv
- CVE-2023-26147 Cross-site scripting in ithewei/libhv
- CVE-2023-26146 Cross-site scripting in ithewei/libhv
- CVE-2023-26145 pydash Command Injection vulnerability
- CVE-2023-26144 graphql Uncontrolled Resource Consumption vulnerability
- CVE-2023-26143 blamer vulnerable to Arbitrary Argument Injection via the blameByFile() API
- CVE-2023-26142 Other in Crow
- CVE-2023-26141 sidekiq Denial of Service vulnerability
- CVE-2023-26140 @excalidraw/excalidraw Cross-site Scripting vulnerability
- CVE-2023-2614 Cross-site Scripting (XSS) - DOM in pimcore/pimcore
- CVE-2023-26139 underscore-keypath vulnerable to Prototype Pollution
- CVE-2023-26138 Other in drogonframework/drogon
- CVE-2023-26137 Other in drogonframework/drogon
- CVE-2023-26136 tough-cookie Prototype Pollution vulnerability
- CVE-2023-26135 flatnest Prototype Pollution vulnerability
- CVE-2023-26134 git-commit-info vulnerable to Command Injection
- CVE-2023-26133 progressbar.js vulnerable to Prototype Pollution
- CVE-2023-26132 dottie vulnerable to Prototype Pollution
- CVE-2023-26131 Algernon engine and themes vulnerable to Cross-site Scripting
- CVE-2023-26130 Other in yhirose/cpp-httplib
- CVE-2023-26129 bwm-ng vulnerable to command injection
- CVE-2023-26128 keep-module-latest vulnerable to Command Injection due to missing input sanitization
- CVE-2023-26127 n158 vulnerable to Command Injection due to improper input sanitization in the 'module.exports' function
- CVE-2023-26126 m.static Directory Traversal vulnerability
- CVE-2023-26125 Improper input validation in github.com/gin-gonic/gin
- CVE-2023-26123 Cross-site scripting in raysan5/raylib
- CVE-2023-26122 safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
- CVE-2023-26121 safe-eval vulnerable to Prototype Pollution via the safeEval function
- CVE-2023-26120 XXL-JOB vulnerable to Cross-site Scripting
- CVE-2023-2612 shiftfs lock unbalance in Ubuntu-specific kernels
- CVE-2023-26119 HtmlUnit Code Injection vulnerability
- CVE-2023-26118 angular vulnerable to regular expression denial of service via the <input type="url"> element
- CVE-2023-26117 angular vulnerable to regular expression denial of service via the $resource service
- CVE-2023-26116 angular vulnerable to regular expression denial of service via the angular.copy() utility
- CVE-2023-26115 word-wrap vulnerable to Regular Expression Denial of Service
- CVE-2023-26114 code-server vulnerable to Missing Origin Validation in WebSockets
- CVE-2023-26113 Collection.js vulnerable to Prototype Pollution
- CVE-2023-26112 configobj ReDoS exploitable by developer using values in a server-side configuration file
- CVE-2023-26111 node-static and @nubosoftware/node-static vulnerable to Directory Traversal
- CVE-2023-26110 node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
- CVE-2023-2611 Advantech R-SeeNet Use of Hard-coded Credentials
- CVE-2023-26109 node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
- CVE-2023-26108 @nestjs/core vulnerable to Information Exposure via StreamableFile pipe
- CVE-2023-26107 SketchSVG Arbitrary Code Injection vulnerability
- CVE-2023-26106 dot-lens vulnerable to Prototype Pollution
- CVE-2023-26105 mde utilities contains Prototype Pollution
- CVE-2023-26104 Denial of Service vulnerability in lite-web-server
- CVE-2023-26103 Regular Expression Denial of Service in Deno.upgradeWebSocket API
- CVE-2023-26102 rangy vulnerable to Prototype Pollution
- CVE-2023-26101 Path traversal in progress:flowmon packet investigator
- CVE-2023-26100 Cross-site scripting in progress:flowmon os
- CVE-2023-2610 Integer Overflow or Wraparound in vim/vim
- CVE-2023-26099 Missing authorization in telindus:apsal
- CVE-2023-26098 File upload in telindus:apsal
- CVE-2023-26097 Missing authorization in telindus:apsal
- CVE-2023-26095 Denial of service in stormshield:stormshield network security
- CVE-2023-26093 SQL injection in puzzle:liima
- CVE-2023-26092 Code injection in puzzle:liima
- CVE-2023-26091 frp_form_answers allows Cross-site Scripting
- CVE-2023-2609 NULL Pointer Dereference in vim/vim
- CVE-2023-26089 Hardcoded credentials in echa.europa:iuclid
- CVE-2023-26088 Path traversal in malwarebytes:malwarebytes
- CVE-2023-26085 Memory corruption in arm:nn android neural networks driver
- CVE-2023-26084 Weak cryptography in arm:aarch64cryptolib
- CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure
- CVE-2023-26081 Security feature bypass in fedoraproject:fedora
- CVE-2023-2608 Multiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL Injection
- CVE-2023-26078 Privilege escalation in atera:atera
- CVE-2023-26077 Misconfiguration in atera:atera
- CVE-2023-26076 Memory corruption in samsung:exynos 1280 firmware
- CVE-2023-26075 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26074 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26073 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26072 Memory corruption in samsung:exynos 1080 firmware
- CVE-2023-26071 Information disclosure in harpaitalia:mcuboict
- CVE-2023-26070 Other in lexmark:cslbl firmware
- CVE-2023-2607 Multiple Page Generator Plugin <= 3.3.17 - Authenticated (Administrator+) SQL Injection
- CVE-2023-26069 Other in lexmark:cslbl firmware
- CVE-2023-26068 Other in lexmark:cslbl firmware
- CVE-2023-26067 Other in lexmark:cslbl firmware
- CVE-2023-26066 Memory corruption in lexmark:cslbl firmware
- CVE-2023-26065 Integer overflow in lexmark:cslbl firmware
- CVE-2023-26064 Memory corruption in lexmark:cslbl firmware
- CVE-2023-26063 Memory corruption in lexmark:cslbl firmware
- CVE-2023-26062 Privilege escalation in nokia:web element manager
- CVE-2023-26061 Cross-site scripting in nokia:netact
- CVE-2023-26060 Code injection in nokia:netact
- CVE-2023-2606 WP Brutal AI < 2.06 - Admin+ Stored XSS
- CVE-2023-26059 Cross-site scripting in nokia:netact
- CVE-2023-26058 XML external entity in nokia:netact
- CVE-2023-26057 XML external entity in nokia:netact