Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 372 of 430.
- CVE-2023-24599 Missing authorization in open-xchange:ox app suite
- CVE-2023-24598 Information disclosure in open-xchange:ox app suite
- CVE-2023-24597 Security feature bypass in open-xchange:ox app suite
- CVE-2023-24595 Command injection in UR32L
- CVE-2023-24594 BIG-IP TMM SSL vulnerability
- CVE-2023-24592 Path traversal in Intel(R) oneAPI Toolkits and Component software
- CVE-2023-24591 Privilege escalation in Intel(R) Binary Configuration Tool software
- CVE-2023-24590 Memory corruption in Controller 6000
- CVE-2023-2459 Security feature bypass in Chrome
- CVE-2023-24589 Memory corruption in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24588 Information disclosure in Intel(R) Optane(TM) SSD products
- CVE-2023-24587 Denial of service in Intel(R) Optane(TM) SSD products
- CVE-2023-24586 Information disclosure in SkyBridge MB-A100/110
- CVE-2023-24585 Memory corruption in Cesium NET
- CVE-2023-24584 Controller 6000 buffer overflow via upload feature in web interface
- CVE-2023-24583 Command injection in UR32L
- CVE-2023-24582 Command injection in UR32L
- CVE-2023-24581 Use after free in Solid Edge SE2022
- CVE-2023-24580 Resource exhaustion in Django
- CVE-2023-2458 Use after free in Chrome
- CVE-2023-24579 Other in mcafee:total protection
- CVE-2023-24578 Privilege escalation in mcafee:total protection
- CVE-2023-24577 Privilege escalation in mcafee:total protection
- CVE-2023-24576 Code injection in NetWorker, NVE
- CVE-2023-24575 Privilege escalation in Dell Multifunction Printer E525w Driver and Software Suite
- CVE-2023-24574 Denial of service in Enterprise SONiC OS
- CVE-2023-24573 Other in Dell Command Monitor (DCM)
- CVE-2023-24572 Path traversal in Dell Command Integration Suite for System Center (DCIS)
- CVE-2023-24571 Other in Embedded Box PC 3000 , CPG BIOS
- CVE-2023-2457 Memory corruption in Chrome
- CVE-2023-24569 Privilege escalation in Alienware Command Center (AWCC)
- CVE-2023-24568 Security feature bypass in NetWorker
- CVE-2023-24567 Information disclosure in Dell NetWorker, NVE
- CVE-2023-24566 Memory corruption in Solid Edge SE2022
- CVE-2023-24565 Memory corruption in Solid Edge SE2022
- CVE-2023-24564 Memory corruption in Solid Edge SE2022
- CVE-2023-24563 Memory corruption in Solid Edge SE2022
- CVE-2023-24562 Memory corruption in Solid Edge SE2022
- CVE-2023-24561 Memory corruption in Solid Edge SE2022
- CVE-2023-24560 Memory corruption in Solid Edge SE2022
- CVE-2023-24559 Memory corruption in Solid Edge SE2022
- CVE-2023-24558 Memory corruption in Solid Edge SE2022
- CVE-2023-24557 Memory corruption in Solid Edge SE2022
- CVE-2023-24556 Memory corruption in Solid Edge SE2022
- CVE-2023-24555 Memory corruption in Solid Edge SE2022
- CVE-2023-24554 Memory corruption in Solid Edge SE2022
- CVE-2023-24553 Memory corruption in Solid Edge SE2022
- CVE-2023-24552 Memory corruption in Solid Edge SE2022
- CVE-2023-24551 Memory corruption in Solid Edge SE2022
- CVE-2023-24550 Memory corruption in Solid Edge SE2022
- CVE-2023-2455 Security feature bypass in postgresql
- CVE-2023-24549 Memory corruption in Solid Edge SE2022
- CVE-2023-24548 Denial of service in EOS
- CVE-2023-24547 On Arista MOS configuration of a BGP password will cause the password to be logged in clear text.
- CVE-2023-24546 Missing authorization in CloudVision
- CVE-2023-24545 Denial of service in EOS
- CVE-2023-24544 Missing authorization in BS-GSL and BS-GS series
- CVE-2023-24542 Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24540 Improper handling of JavaScript whitespace in html/template
- CVE-2023-2454 Code injection in postgresql
- CVE-2023-24539 Improper sanitization of CSS values in html/template
- CVE-2023-24538 Backticks not treated as string delimiters in html/template
- CVE-2023-24537 Infinite loop in parsing in go/scanner
- CVE-2023-24536 Excessive resource consumption in net/http, net/textproto and mime/multipart
- CVE-2023-24535 Panic when parsing invalid messages in google.golang.org/protobuf
- CVE-2023-24534 Excessive memory allocation in net/http and net/textproto
- CVE-2023-24533 Incorrect multiplication of unreduced P-256 scalars in filippo.io/nistec
- CVE-2023-24532 Incorrect calculation on P256 curves in crypto/internal/nistec
- CVE-2023-24531 Output of "go env" does not sanitize values in cmd/go
- CVE-2023-24530 File upload in BusinessObjects Business Intelligence Platform (CMC)
- CVE-2023-2453 Local file Inclusion (LFI) in Forum Infusion via Directory Traversal
- CVE-2023-24529 Cross-site scripting in NetWeaver AS ABAP (Business Server Pages application)
- CVE-2023-24528 Missing authorization in Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests)
- CVE-2023-24527 Improper Access Control in SAP NetWeaver AS Java for Deploy Service
- CVE-2023-24526 Improper Access Control in SAP NetWeaver AS Java (Classload Service)
- CVE-2023-24525 Cross-site scripting in CRM (WebClient UI)
- CVE-2023-24524 Missing authorization in S/4 HANA (Map Treasury Correspondence Format Data)
- CVE-2023-24523 Command injection in Host Agent Service
- CVE-2023-24522 Cross-site scripting in NetWeaver AS ABAP (BSP Framework)
- CVE-2023-24521 Cross-site scripting in NetWeaver AS ABAP (BSP Framework)
- CVE-2023-24520 Command injection in UR32L
- CVE-2023-2452 Advanced Woo Search <= 2.77 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-24519 Command injection in UR32L
- CVE-2023-24518 Disabling the administrator's account through cross-site request forgery
- CVE-2023-24517 Remote Code Execution via Unrestricted File Upload
- CVE-2023-24516 Stored Cross Site Scripting - Special Days Module
- CVE-2023-24515 Server side request forgery in api checker
- CVE-2023-24514 Stored Cross Site Scripting Vulnerability in Visual Console Module
- CVE-2023-24513 Denial of service in EOS
- CVE-2023-24512 Missing authorization in Terminattr
- CVE-2023-24511 Denial of service in EOS
- CVE-2023-24510 On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart.
- CVE-2023-2451 SourceCodester Online DJ Management System GET Parameter view_details.php sql injection
- CVE-2023-24509 Privilege escalation in Arista EOS
- CVE-2023-24508 Remote Code Execution in Baicells RTS Platform
- CVE-2023-24507 AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload
- CVE-2023-24506 Milesight NCR/Camera CWE-522: Insufficiently Protected Credentials
- CVE-2023-24505 Milesight NCR/Camera CWE-200: Exposure of Sensitive Information
- CVE-2023-24504 Electra Central AC unit – Adjacent attacker may cause the unit to connect to unauthorized update server
- CVE-2023-24503 Electra Smart Kit for Split AC – Adjacent attacker may cause the unit to load unauthorized FW