Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 371 of 430.
- CVE-2023-24789 jeecg-boot contains SQL Injection vulnerability
- CVE-2023-24788 NotrinosERP vulnerable to SQL Injection
- CVE-2023-24785 Denial of service in peazip project:peazip
- CVE-2023-24782 SQL Injection in Funadmin
- CVE-2023-24781 SQL Injection in Funadmin
- CVE-2023-24780 SQL Injection in Funadmin
- CVE-2023-2478 Missing authorization in GitLab
- CVE-2023-24777 SQL Injection in Funadmin
- CVE-2023-24776 Remote code execution in Funadmin
- CVE-2023-24775 SQL Injection in Funadmin
- CVE-2023-24774 Funadmin vulnerable to SQL injection
- CVE-2023-24773 SQL Injection in Funadmin
- CVE-2023-2477 Funadmin Cx.php tagLoad cross site scripting
- CVE-2023-24769 Stored cross site scripting in changedetection.io
- CVE-2023-24763 SQL injection in prestashop:xen forum
- CVE-2023-24762 Command injection in dlink:dir-867 firmware
- CVE-2023-24760 Privilege escalation in ofcms project:ofcms
- CVE-2023-2476 Dromara J2eeFAST Announcement cross site scripting
- CVE-2023-24758 Null dereference in debian:debian linux
- CVE-2023-24757 Null dereference in debian:debian linux
- CVE-2023-24756 Null dereference in debian:debian linux
- CVE-2023-24755 Null dereference in debian:debian linux
- CVE-2023-24754 Null dereference in debian:debian linux
- CVE-2023-24752 Null dereference in debian:debian linux
- CVE-2023-24751 Null dereference in debian:debian linux
- CVE-2023-2475 Dromara J2eeFAST System Message cross site scripting
- CVE-2023-24747 Cross-site scripting in jflyfox:jfinal cms
- CVE-2023-24744 Cross-site scripting in rediker:adminplus
- CVE-2023-2474 Rebuild cross-site request forgery
- CVE-2023-24737 Cross-site scripting in sigb:pmb
- CVE-2023-24736 Code injection in sigb:pmb
- CVE-2023-24735 Open redirect in sigb:pmb
- CVE-2023-24734 File upload in sigb:pmb
- CVE-2023-24733 Cross-site scripting in sigb:pmb
- CVE-2023-24732 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24731 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24730 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-2473 Dreamer CMS Password Hash Calculation UserController.java updatePwd algorithmic complexity
- CVE-2023-24729 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24728 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24726 SQL injection in phpgurukul:art gallery management system
- CVE-2023-24724 Cross-site scripting in sas:web administration interface
- CVE-2023-24721 Cross-site scripting in liveaction:livesp
- CVE-2023-24720 File upload in readium:readium-js
- CVE-2023-2472 Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.61 - Reflected XSS
- CVE-2023-24709 Denial of service in paradox:ipr512 firmware
- CVE-2023-2470 Add to Feedly <= 1.2.11 - Admin+ Stored XSS
- CVE-2023-24698 Path traversal in foswiki:foswiki
- CVE-2023-24690 Cross-site scripting in churchcrm:churchcrm
- CVE-2023-24689 Path traversal in mojoportal:mojoportal
- CVE-2023-24688 Missing authorization in mojoportal:mojoportal
- CVE-2023-24687 Cross-site scripting in mojoportal:mojoportal
- CVE-2023-24686 Code injection in churchcrm:churchcrm
- CVE-2023-24685 SQL injection in churchcrm:churchcrm
- CVE-2023-24684 SQL injection in churchcrm:churchcrm
- CVE-2023-2468 Security feature bypass in Chrome
- CVE-2023-24678 Denial of service in centralite:pearl firmware
- CVE-2023-24676 Arbitrary Code Execution in Processwire
- CVE-2023-24675 Cross-site scripting in bludit:bludit
- CVE-2023-24674 Privilege escalation in bludit:bludit
- CVE-2023-24671 Privilege escalation in vxsearch:vx search
- CVE-2023-2467 Security feature bypass in Chrome
- CVE-2023-2466 Other in Chrome
- CVE-2023-24657 Cross-site scripting in phpipam:phpipam
- CVE-2023-24656 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24655 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24654 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24653 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24652 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24651 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-2465 Security feature bypass in Chrome
- CVE-2023-24648 Cross-site scripting in zippy:zstore
- CVE-2023-24647 SQL injection in oretnom23:online food ordering system
- CVE-2023-24646 File upload in oretnom23:online food ordering system
- CVE-2023-24643 SQL injection in judging management system project:judging management system
- CVE-2023-24642 SQL injection in judging management system project:judging management system
- CVE-2023-24641 SQL injection in judging management system project:judging management system
- CVE-2023-2464 Security feature bypass in Chrome
- CVE-2023-2463 Other in Chrome
- CVE-2023-24626 Privilege escalation in gnu:screen
- CVE-2023-24625 Missing authorization in ladybirdweb:faveo servicedesk
- CVE-2023-24623 Paranoidhttp Server-Side Request Forgery vulnerability
- CVE-2023-24622 safeurl-python contains Server-Side Request Forgery
- CVE-2023-24621 Esoteric YamlBeans Unsafe Deserialization vulnerability
- CVE-2023-24620 Esoteric YamlBeans XML Entity Expansion vulnerability
- CVE-2023-2462 Security feature bypass in Chrome
- CVE-2023-24619 Information disclosure in redpanda:redpanda
- CVE-2023-24613 Memory corruption in arraynetworks:arrayos ag
- CVE-2023-24612 Command injection in pdfbook project:pdfbook
- CVE-2023-24610 File upload in nosh chartingsystem project:nosh chartingsystem
- CVE-2023-2461 Use after free in Chrome
- CVE-2023-24609 Integer overflow in matrixssl:matrixssl
- CVE-2023-24607 Denial of service in qt:qt
- CVE-2023-24605 Missing authorization in open-xchange:ox app suite
- CVE-2023-24604 Denial of service in open-xchange:ox app suite
- CVE-2023-24603 Denial of service in open-xchange:ox app suite
- CVE-2023-24602 Cross-site scripting in open-xchange:ox app suite
- CVE-2023-24601 Cross-site scripting in open-xchange:ox app suite
- CVE-2023-24600 Missing authorization in open-xchange:ox app suite
- CVE-2023-2460 Security feature bypass in Chrome