Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 367 of 430.
- CVE-2023-2521 NEXTU NEXT-7004N POST Request formFilter cross site scripting
- CVE-2023-25207 SQL injection in prestashop:dpd france
- CVE-2023-25206 SQL injection in prestashop:advanced reviews
- CVE-2023-25201 Cross-site request forgery in multitech:conduit ap mtcap2-l4e1-868-042a firmware
- CVE-2023-25200 An HTML injection vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote attacker to render m
- CVE-2023-2520 Caton Prime Ping command injection
- CVE-2023-25199 A reflected cross-site scripting (XSS) vulnerability exists in the MT Safeline X-Ray X3310 webserver version NXG 19.05 that enables a remote
- CVE-2023-25197 apache fineract: SQL injection vulnerability in certain procedure calls
- CVE-2023-25196 Apache Fineract: SQL injection vulnerability
- CVE-2023-25195 Apache Fineract: SSRF template type vulnerability in certain authenticated users
- CVE-2023-25194 Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
- CVE-2023-25193 Denial of service in fedoraproject:fedora
- CVE-2023-25192 Information disclosure in ami:megarac sp-x
- CVE-2023-25191 Information disclosure in ami:megarac sp-x
- CVE-2023-2519 Caton CTP Relay Server API login sql injection
- CVE-2023-25189 BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, rega
- CVE-2023-25188 Auth bypass in nokia:asika airscale firmware
- CVE-2023-25187 Hardcoded credentials in nokia:asika airscale firmware
- CVE-2023-25186 Path traversal in nokia:asika airscale firmware
- CVE-2023-25185 Privilege escalation in nokia:asika airscale firmware
- CVE-2023-25184 Weak cryptography in SkyBridge MB-A200, SkyBridge BASIC MB-A130, and SkySpider MB-R210
- CVE-2023-25183 Code injection in OvrC Cloud
- CVE-2023-25182 Privilege escalation in Intel(R) Unite(R) Client software for Mac
- CVE-2023-25181 Memory corruption in Cesium NET
- CVE-2023-2518 Easy Forms for Mailchimp < 6.8.9 - Reflected XSS
- CVE-2023-25179 Denial of service in Intel(R) Unite(R) android application
- CVE-2023-25178 Controller design flaw - unsigned firmware
- CVE-2023-25177 Delta Electronics CNCSoft-B DOPSoft Stack-based buffer overflow
- CVE-2023-25176 Pasteboard has an out-of-bounds read vulnerability
- CVE-2023-25175 Information disclosure in Intel(R) Server Board BMC firmware
- CVE-2023-25174 Privilege escalation in Intel(R) Chipset Driver Software
- CVE-2023-25173 containerd supplementary groups are not set up properly
- CVE-2023-25172 Discourse vulnerable to Cross-site Scripting - user name displayed on post
- CVE-2023-25171 Kiwi TCMS has denial of service vulnerability on Password reset page
- CVE-2023-25170 PrestaShop has possible CSRF token fixation
- CVE-2023-2517 Metform Elementor Contact Form Builder <= 3.3.2 - Cross-Site Request Forgery via permalink_setup
- CVE-2023-25169 Yearly Review Plugin leaking anonymised users data in discourse-yearly-review
- CVE-2023-25168 Symbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings
- CVE-2023-25167 Regular expression denial of service via installing themes via git in discourse
- CVE-2023-25166 Regular Expression Denial of Service (ReDoS) Vulnerability
- CVE-2023-25165 getHostByName Function Information Disclosure
- CVE-2023-25164 Sensitive Information leak via Script File in TinaCMS
- CVE-2023-25163 Argo CD leaks repository credentials in user-facing error messages and in logs
- CVE-2023-25162 Nextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs
- CVE-2023-25161 Nextcloud Server's missing rate limiting on password reset functionality allows sending lots of emails
- CVE-2023-25160 IDOR Vulnerability in Nextcloud Mail
- CVE-2023-2516 Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass
- CVE-2023-25159 Nextcloud Server previews are accessible without a watermark
- CVE-2023-25158 Unfiltered SQL Injection in Geotools
- CVE-2023-25157 Unfiltered SQL Injection Vulnerabilities in Geoserver
- CVE-2023-25156 Kiwi TCMS has no protection against brute-force attacks on login page
- CVE-2023-25155 Integer Overflow in several Redis commands can lead to denial of service.
- CVE-2023-25154 Cross site scripting (XSS) of ActivityPub URI in misskey
- CVE-2023-25153 containerd OCI image importer memory exhaustion
- CVE-2023-25152 Symbolic Link (Symlink) Following in github.com/pterodactyl/wings
- CVE-2023-25151 DoS vulnerability for high cardinality metrics in opentelemetry-go-contrib
- CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users
- CVE-2023-2515 Privilege escalation to system admin via personal access tokens
- CVE-2023-25149 TimescaleDB has incorrect access control
- CVE-2023-25148 Privilege escalation in Trend Micro Apex One
- CVE-2023-25147 Security feature bypass in Trend Micro Apex One
- CVE-2023-25146 Path traversal in Trend Micro Apex One
- CVE-2023-25145 Privilege escalation in Trend Micro Apex One
- CVE-2023-25144 Privilege escalation in Trend Micro Apex One
- CVE-2023-25143 Other in Trend Micro Apex One
- CVE-2023-25141 JNDI injection into Apache sling-org-apache-sling-jcr-base
- CVE-2023-25140 Memory corruption in Parasolid V34.0
- CVE-2023-2514 DB username/password revealed in application logs
- CVE-2023-25139 Memory corruption in gnu:glibc
- CVE-2023-25136 Memory corruption in fedoraproject:fedora
- CVE-2023-25135 Deserialization in vbulletin:vbulletin
- CVE-2023-25134 Other in mcafee:total protection
- CVE-2023-25133 Improper privilege management vulnerability in CyberPower PowerPanel Business
- CVE-2023-25132 Unrestricted upload of file with dangerous type vulnerability in CyberPower PowerPanel Business
- CVE-2023-25131 Use of default password vulnerability in CyberPower PowerPanel Business
- CVE-2023-2513 Use after free in Linux kernel ext4 filesystem
- CVE-2023-25124 Memory corruption in UR32L
- CVE-2023-25123 Memory corruption in UR32L
- CVE-2023-25122 Memory corruption in UR32L
- CVE-2023-25121 Memory corruption in UR32L
- CVE-2023-25120 Memory corruption in UR32L
- CVE-2023-2512 Buffer under-read in workerd
- CVE-2023-25119 Memory corruption in UR32L
- CVE-2023-25118 Memory corruption in UR32L
- CVE-2023-25117 Memory corruption in UR32L
- CVE-2023-25116 Memory corruption in UR32L
- CVE-2023-25115 Memory corruption in UR32L
- CVE-2023-25114 Memory corruption in UR32L
- CVE-2023-25113 Memory corruption in UR32L
- CVE-2023-25112 Memory corruption in UR32L
- CVE-2023-25111 Memory corruption in UR32L
- CVE-2023-25110 Memory corruption in UR32L
- CVE-2023-25109 Memory corruption in UR32L
- CVE-2023-25108 Memory corruption in UR32L
- CVE-2023-25107 Memory corruption in UR32L
- CVE-2023-25106 Memory corruption in UR32L
- CVE-2023-25105 Memory corruption in UR32L
- CVE-2023-25104 Memory corruption in UR32L
- CVE-2023-25103 Memory corruption in UR32L
- CVE-2023-25102 Memory corruption in UR32L