Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 366 of 430.
- CVE-2023-25438 Misconfiguration in genomedics:millegpg
- CVE-2023-25437 Information disclosure in vtech:vcs754a firmware
- CVE-2023-25435 Memory corruption in libtiff:libtiff
- CVE-2023-25434 Memory corruption in libtiff:libtiff
- CVE-2023-25433 Memory corruption in libtiff:libtiff
- CVE-2023-25432 SQL injection in online reviewer management system project:online reviewer management system
- CVE-2023-25431 Cross-site scripting in online reviewer management system project:online reviewer management system
- CVE-2023-25428 Other in soft-o:free password manager
- CVE-2023-25415 Missing authorization in aten:pe8108 firmware
- CVE-2023-25414 Denial of service in aten:pe8108 firmware
- CVE-2023-25413 Information disclosure in aten:pe8108 firmware
- CVE-2023-25411 Cross-site request forgery in aten:pe8108 firmware
- CVE-2023-2541 Sensitive information disclosure in KNIME Hub Web Application
- CVE-2023-25409 Missing authorization in aten:pe8108 firmware
- CVE-2023-25407 Information disclosure in aten:pe8108 firmware
- CVE-2023-25403 Auth bypass in yf-exam project:yf-exam
- CVE-2023-25402 File upload in yf-exam project:yf-exam
- CVE-2023-25399 Withdrawn: scipy memory leak vulnerability
- CVE-2023-25396 Privilege escalation in caphyon:advanced installer
- CVE-2023-25395 Command injection in totolink:a7100ru firmware
- CVE-2023-25394 Race condition in getvideostream:videostream
- CVE-2023-25392 Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
- CVE-2023-2538 TLS Private Key Accessible to External Parties
- CVE-2023-25369 Denial of service in siglent:sds1074x-e firmware
- CVE-2023-25368 Missing authorization in siglent:sds1074x-e firmware
- CVE-2023-25367 Command injection in siglent:sds1074x-e firmware
- CVE-2023-25366 Information disclosure in siglent:sds 1104x-e firmware
- CVE-2023-25365 October CMS Cross-site Scripting vulnerability
- CVE-2023-25364 Opswat Metadefender Core before 5.2.1 does not properly defend against potential HTML injection and XSS attacks.
- CVE-2023-25363 Use after free in webkitgtk:webkitgtk
- CVE-2023-25362 Use after free in webkitgtk:webkitgtk
- CVE-2023-25361 Use after free in webkitgtk:webkitgtk
- CVE-2023-25360 Use after free in webkitgtk:webkitgtk
- CVE-2023-25358 Use after free in fedoraproject:fedora
- CVE-2023-25356 Command injection in coredial:sipxcom
- CVE-2023-25355 Privilege escalation in coredial:sipxcom
- CVE-2023-25350 SQL injection in ladybirdweb:faveo helpdesk
- CVE-2023-25348 Code injection in churchcrm:churchcrm
- CVE-2023-25347 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-25346 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-25345 Arbitrary local file read vulnerability during template rendering
- CVE-2023-25344 Code injection in swig-templates project:swig-templates
- CVE-2023-25341 A Directory Traversal vulnerability in ladle dev server 2.5.1 and earlier allows an attacker on the same network to read files accessible to
- CVE-2023-2534 Information disclouse and DoS via websocket push events
- CVE-2023-25330 MyBatis-Plus vulnerable to SQL injection via TenantPlugin
- CVE-2023-2533 PaperCut NG/MF Cross-Site Request Forgery (CSRF)
- CVE-2023-25314 Cross-site scripting in wwbn:avideo
- CVE-2023-25313 AVideo contains Command injection when embedding a video link
- CVE-2023-2531 Improper Restriction of Excessive Authentication Attempts in azuracast/azuracast
- CVE-2023-25309 Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gem
- CVE-2023-25307 mrpack-install vulnerable to path traversal with dependency
- CVE-2023-25306 Path traversal in multimc:multimc
- CVE-2023-25305 Path traversal in polymc:polymc
- CVE-2023-25304 Path traversal in prismlauncher:prism launcher
- CVE-2023-25303 Path traversal in atlauncher:atlauncher
- CVE-2023-2530 Privilege escalation in Puppet Enterprise
- CVE-2023-25295 Cross-site scripting in gruen:evewa3
- CVE-2023-25292 Cross-site scripting in group-office:group office
- CVE-2023-2529 Enable SVG Uploads <= 2.1.5 - Author+ Stored XSS via SVG
- CVE-2023-25289 Path traversal in virtualreception:digital reciptie
- CVE-2023-25283 Memory corruption in dlink:dir-820l firmware
- CVE-2023-25282 Memory corruption in dlink:dir-820l firmware
- CVE-2023-25281 Memory corruption in dlink:dir-820l firmware
- CVE-2023-25280 D-Link DIR-820 Router OS Command Injection
- CVE-2023-2528 Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action
- CVE-2023-25279 Command injection in dlink:dir-820l firmware
- CVE-2023-2527 Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.4 - Admin+ SQLi
- CVE-2023-25267 Memory corruption in gfi:kerio connect
- CVE-2023-25266 Code injection in docmosis:tornado
- CVE-2023-25265 Path traversal in docmosis:tornado
- CVE-2023-25264 Auth bypass in docmosis:tornado
- CVE-2023-25263 Hardcoded credentials in stimulsoft:designer
- CVE-2023-25262 Server-side request forgery in stimulsoft:designer
- CVE-2023-25261 Code injection in stimulsoft:designer
- CVE-2023-25260 Path traversal in stimulsoft:designer
- CVE-2023-2526 Easy Google Maps <= 1.11.7 - Cross-Site Request Forgery via AJAX action
- CVE-2023-25241 Cross-site scripting in bgerp:bgerp
- CVE-2023-25240 SameSite Attribute vulnerability in pimCore
- CVE-2023-2524 Control iD RHiD direct request
- CVE-2023-25235 Memory corruption in tenda:ac500 firmware
- CVE-2023-25234 Memory corruption in tenda:ac500 firmware
- CVE-2023-25233 Memory corruption in tenda:ac500 firmware
- CVE-2023-25231 Memory corruption in tenda:w30e firmware
- CVE-2023-25230 Server-side request forgery in loonflow project:loonflow
- CVE-2023-2523 Weaver E-Office unrestricted upload
- CVE-2023-25223 SQL injection in crmeb:crmeb java
- CVE-2023-25222 Memory corruption in gnu:libredwg
- CVE-2023-25221 Memory corruption in debian:debian linux
- CVE-2023-25220 Memory corruption in tenda:ac5 firmware
- CVE-2023-2522 Chengdu VEC40G Network Detection os command injection
- CVE-2023-25219 Memory corruption in tenda:ac5 firmware
- CVE-2023-25218 Memory corruption in tenda:ac5 firmware
- CVE-2023-25217 Memory corruption in tenda:ac5 firmware
- CVE-2023-25216 Memory corruption in tenda:ac5 firmware
- CVE-2023-25215 Memory corruption in tenda:ac5 firmware
- CVE-2023-25214 Memory corruption in tenda:ac5 firmware
- CVE-2023-25213 Memory corruption in tenda:ac5 firmware
- CVE-2023-25212 Memory corruption in tenda:ac5 firmware
- CVE-2023-25211 Memory corruption in tenda:ac5 firmware
- CVE-2023-25210 Memory corruption in tenda:ac5 firmware