Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 363 of 430.
- CVE-2023-25747 Use after free in Firefox for Android
- CVE-2023-25746 Memory corruption in Firefox ESR
- CVE-2023-25745 Memory corruption in Firefox
- CVE-2023-25744 Memory corruption in Firefox
- CVE-2023-25743 Security feature bypass in Firefox
- CVE-2023-25742 Denial of service in Firefox
- CVE-2023-25741 Information disclosure in Firefox
- CVE-2023-25740 Information disclosure in Firefox
- CVE-2023-2574 Authenticated Command Injection
- CVE-2023-25739 Use after free in Firefox
- CVE-2023-25738 Memory corruption in Firefox
- CVE-2023-25737 Memory corruption in Firefox
- CVE-2023-25736 Memory corruption in Firefox
- CVE-2023-25735 Use after free in Firefox
- CVE-2023-25734 Server-side request forgery in Firefox
- CVE-2023-25733 Null dereference in Firefox
- CVE-2023-25732 Memory corruption in Firefox
- CVE-2023-25731 Code injection in Firefox
- CVE-2023-25730 Other in Firefox
- CVE-2023-2573 Authenticated Command Injection
- CVE-2023-25729 Security feature bypass in Firefox
- CVE-2023-25728 Information disclosure in Firefox
- CVE-2023-25727 Cross-site Scripting vulnerability in drag-and-drop upload of phpMyAdmin
- CVE-2023-25725 Security feature bypass in debian:debian linux
- CVE-2023-25722 Veracode Scan Jenkins Plugin vulnerable to information disclosure
- CVE-2023-25721 Veracode Scan Jenkins Plugin vulnerable to information disclosure
- CVE-2023-2572 Survey Maker < 3.4.7 - Reflected XSS
- CVE-2023-25719 Code injection in connectwise:control
- CVE-2023-25718 Security feature bypass in connectwise:control
- CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE
- CVE-2023-25716 WordPress Announce from the Dashboard Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25715 WordPress GamiPress Plugin <= 2.5.6 is vulnerable to Broken Access Control
- CVE-2023-25714 WordPress Quick Paypal Payments plugin <= 5.7.25 - Broken Access Control vulnerability
- CVE-2023-25713 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25712 WordPress Opt-Out for Google Analytics Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25711 WordPress WPGlobus Translate Options Plugin <= 2.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25710 WordPress Click to Call or Chat Buttons Plugin <= 1.4.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2571 Quiz Maker < 6.4.2.7 - Reflected XSS
- CVE-2023-25709 WordPress Locatoraid Store Locator Plugin <= 3.9.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25708 Cross-site request forgery in WP VR – 360 Panorama and Virtual Tour Builder For WordPress
- CVE-2023-25707 WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25706 WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25705 WordPress WP Prayer Plugin <= 1.9.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25704 WordPress Interactive SVG Image Map Builder Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25703 WordPress Meta slider and carousel with lightbox plugin <= 1.6.2 - Broken Access Control vulnerability
- CVE-2023-25702 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25701 WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation
- CVE-2023-25700 WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection
- CVE-2023-2570 Memory corruption in EcoStruxure Foxboro DCS Control Core Services
- CVE-2023-25699 WordPress VideoWhisper Live Streaming Integration plugin <= 5.5.15 - Remote Code Execution (RCE)
- CVE-2023-25698 WordPress Shoppable Images Lite Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25697 WordPress GamiPress plugin <= 2.5.6 - CSRF Leading to Settings Change Vulnerability
- CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE
- CVE-2023-25695 Information disclosure in Apache Airflow
- CVE-2023-25693 Sqoop Apache Airflow Provider Remote Code Execution Vulnerability
- CVE-2023-25692 Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service
- CVE-2023-25691 Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution
- CVE-2023-25690 Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
- CVE-2023-2569 Memory corruption in EcoStruxure Foxboro DCS Control Core Services
- CVE-2023-25689 IBM Security Key Lifecycle Manager information disclosure
- CVE-2023-25688 IBM Security Key Lifecycle Manager information disclosure
- CVE-2023-25687 IBM Security Key Lifecycle Manager information disclosure
- CVE-2023-25686 IBM Security Key Lifecycle Manager information disclosure
- CVE-2023-25684 IBM Security Key Lifecycle Manager SQL injection
- CVE-2023-25683 IBM PowerVM Hypervisor information disclosure
- CVE-2023-25682 IBM Sterling B2B Integrator information disclosure
- CVE-2023-25681 IBM Spectrum Virtualize security bypass
- CVE-2023-25680 IBM Robotic Process Automation information disclosure
- CVE-2023-2568 Photo Gallery by Ays < 5.1.7 - Reflected XSS
- CVE-2023-25676 TensorFlow has null dereference on ParallelConcat with XLA
- CVE-2023-25675 TensorFlow has Segfault in Bincount with XLA
- CVE-2023-25674 TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
- CVE-2023-25673 TensorFlow has Floating Point Exception in TensorListSplit with XLA
- CVE-2023-25672 TensorFlow has Null Pointer Error in LookupTableImportV2
- CVE-2023-25671 TensorFlow has segmentation fault in tfg-translate
- CVE-2023-25670 TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
- CVE-2023-2567 Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
- CVE-2023-25669 TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
- CVE-2023-25668 TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
- CVE-2023-25667 TensorFlow vulnerable to segfault when opening multiframe gif
- CVE-2023-25666 TensorFlow has Floating Point Exception in AudioSpectrogram
- CVE-2023-25665 TensorFlow has Null Pointer Error in SparseSparseMaximum
- CVE-2023-25664 TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
- CVE-2023-25663 TensorFlow has Null Pointer Error in TensorArrayConcatV2
- CVE-2023-25662 TensorFlow vulnerable to integer overflow in EditDistance
- CVE-2023-25661 Denial of Service in TensorFlow
- CVE-2023-25660 TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
- CVE-2023-2566 Cross-site Scripting (XSS) - Stored in openemr/openemr
- CVE-2023-25659 TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
- CVE-2023-25658 TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
- CVE-2023-25657 Remote code execution in Jinja2 template rendering in Nautobot
- CVE-2023-25656 notation-go has excessive memory allocation on verification
- CVE-2023-25655 baserCMS allows any file to be uploaded
- CVE-2023-25654 baserCMS File Uploader Remote Code Execution (RCE) vulnerability
- CVE-2023-25653 Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
- CVE-2023-25652 "git apply --reject" partially-controlled arbitrary file write
- CVE-2023-25651 SQL Injection Vulnerability in Some ZTE Mobile Internet Products
- CVE-2023-25650 Arbitrary File Download Vulnerability in ZTE ZXCLOUD iRAI
- CVE-2023-2565 SourceCodester Multi Language Hotel Management Software POST Parameter ajax.php cross site scripting
- CVE-2023-25649 OS Command Injection Vulnerability in a Mobile Internet Product of ZTE